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GETTING  BORED? 

Bruce  A.  Stewart  has  some  ideas  for  making  IT  work 
more  interesting  during  cautious  times.  PAGE  20 


FIRST  THINGS  FIRST 

John  Meakin,  who  heads  IT  security  at  a  U 


Laws,  Breaches 
Lend  Urgency  to 
Retail  Security 

BY  JAIKUMAR  VIJAYAN 

CHICAGO 

Growing  privacy  concerns 
and  emerging  laws  governing 
the  use  of  sensitive  personal 
information  are  increasing  the 
pressure  on  retailers  to  make 
sure  that  their  data  security 
practices  are  rock-solid,  ac¬ 
cording  to  IT  managers  at  a 
conference  here  last  week. 

They  added  that  an  inability 
to  demonstrate  due  diligence 
on  security  could  expose  com¬ 
panies  to  serious  reputational 
damage,  financial  losses  and 
increased  customer  churn. 

Brian  Kilcourse,  a  former 
retail  industry  CIO  who  is 
now  a  consultant  at  Retail 
Systems  Alert  Group  Inc.  in 

Security,  page  16 


Opening  an  office  in  Beijing  or  Moscow? 
Beware  of  local  vendors  that  offer  name¬ 
brand  software  at  deep  discounts,  because 
it’s  likely  to  be  counterfeit.  Find  out  how 
to  avoid  the  technical  and  legal  liabilities 
of  pirated  software.  Page  39 


Belated  SQL  Server  Upgrade 
Retains  Its  Appeal  to  Testers 


Microsoft  launches 
new  database  release 
after  two-year  delay 

BY  ERIC  LAI  AND 
HEATHER  HAVENSTEIN 

Microsoft  Corp.  is  finally  set 
to  launch  its  SQL  Server  2005 
database  today.  And  despite  a 
two-year  delay,  several  users 
who  have  tested  the  software 
cited  the  improved  perfor¬ 
mance  and  new  functionality 
it  brings  as  positive  develop¬ 
ments  that  likely  will  convince 
them  to  upgrade  soon. 

For  example,  beta  tester 
Mayur  Raichura,  managing  di¬ 
rector  of  information  services 
at  The  Long  &  Foster  Cos.  in 
Fairfax,  Va.,  said  he  is  “hoping 
that  with  the  five  years  they 


have  spent  developing  and 
tightening  this  product,  this 
is  truly  not  a  1.0  version.” 
Raichura  added  that  he  wants 
to  avoid  the  need  for  “some 
serious  patch  management”  or 
deployment  of  service  packs. 

But  he  said  that  based  on 
the  features  he  has  tested  so 
far  in  the  beta  version,  SQL 
Server  2005  could  rival  the 

SQL  Server,  page  51 
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■  Q&A;  Microsoft 
killed  off  a  CRM 
upgrade  last  spring 
and  revised  its 
plans.  Brad  Wilson, 
head  of  Microsoft’s 
CRM  unit,  explains 
the  company's  thinking  and 
discusses  the  CRM  3.0  release 
due  in  December.  PAGE  10 


Users  Remain  Loyal  to 
Novell  Despite  Turmoil 


Vendor  sets  layoff  plans,  names  operations 
chief,  looks  to  focus  on  high-growth  markets 


BY  MATT  HAMBLEN 

Novell  Inc.  went  back  into  re¬ 
structuring  mode  last  week, 
announcing  a  series  of  moves 
that  included  a  600-worker 
layoff,  the  promotion  of  its  top 
sales  executive  to  also  run  de¬ 
velopment  and  marketing,  and 
a  plan  to  concentrate  its  re¬ 
sources  on  high-growth  mar¬ 
kets  such  as  Linux. 

The  software  vendor  also  is 
looking  at  selling  its  Celerant 
Consulting  unit,  which  would 
largely  undo  its  2001  acquisi¬ 


tion  of  Cambridge  Technology 
Partners.  Novell  said  it  plans 
to  retain  a  separate  IT  con¬ 
sulting  group  that  focuses  on 
work  involving  the  company’s 
own  products. 

Despite  the  onslaught  of  re¬ 
structuring  actions,  10 
longtime  Novell  cus¬ 
tomers  said  they  were 
taking  the  develop¬ 
ments  largely  in  stride 
after  having  weathered 
earlier  management 
transitions  and  busi- 


PAGE  16 


ness  downturns  at  the  vendor 
in  recent  years. 

Several  of  the  users  said 
they  wish  Novell’s  SUSE  Lin¬ 
ux  software  had  taken  a  bigger 
share  of  the  Linux  market  by 
now.  And  some  are  worried 
that  the  planned  layoffs  could 
hit  the  Novell  sales  reps  and 
software  developers  they 
work  with. 

But  all  of  the  users 
said  they  remain  loyal 
to  Novell’s  products 
and  the  company’s 
Linux-driven  strategy. 
“Even  with  the  lay- 
Novell,  page  16 
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How  does  Xerox  Global  Services  manage  millions  of  office  devices  for  its  customers? 
Their  largest  application  runs  on  new  SQL  Server™  2005  64-bit  running  on  Windows 
Server  2003,  which  provides  99.999%  uptime*  See  how  at  microsoft.com/bigdata 


Windows 
Server  System 


•Results  not  typical.  Availability  is  dependent  on  many  factors,  including  hardware  and  software  technologies,  mission-critical  operational  processes, 
and  professional  services  2005  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  the  Windows  logo,  Windows  Server,  Windows  Server  System, 
and  Your  potential.  Our  passion,  are  either  trademarks  or  registered  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries. 
XEROX'  is  a  trademark  of  XEROX  CORPORATION. 
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A  Service  Managing  7  Million  Transactions  a  Day. 

Running  on  Microsoft  SQL  Server  2005. 
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The  Power  to  Know  why  other  Bl  vendors  have  arrived  too  late 


WANT  PROOF? 

Check  out  our  Web  site 
to  learn  why  analysts 
and  customers  agree: 

SAS  Business  Intelligence 
is  fast,  simple,  consistent 
and  accurate. 


While  other  vendors  are  playing  catch-up  —  by  just  now  introducing  their  B!  approaches  —  SAS  continues  to 
lead  the  way  in  the  business  intelligence  market.  When  you  consider  investing  in  or  upgrading  your  current 
Bl  software,  talk  to  SAS  about  our  proven  successes. 

•  Unmatched  Enterprise  Intelligence  Platform 
a  Nearly  30  years  of  Bl  experience 

•  Undisputed  leader  in  business  analytics 

•  More  than  4  million  users  at  over  40,000  locations  worldwide 
»  At  work  in  94%  of  FORTUNE  Global  500®  companies 


c 

go  Beyond  Bl  "'  at  www.sas.com/sasBI  •  Analyst  case  study 
_ 


jlJUiWg  I  TO  KNO\ 


■  s .  iriU ; .  other  SAS  Ins!  iU fie  Inc.  product  or  service  names  are  registertxl  traderrierfcs  or  trademarks  of  SAS  Institute  Inc.  In  Die  USA  arid  oltier  countries.  ©  Indicates  USA  registration.  Oltier  brand  and  product  names  are  trademarks  of  their  respective  companies.  €>  2005  SAS  Institute  Inc.  All  rights  reserved.  356673US.1 106 


Dirty  Data  Blights  the  Bottom  Line 

In  the  Technology  section:  Although  it’s  a  problem 
that’s  often  overshadowed  by  sexier  issues,  poor 
data  quality  costs  companies  a  lot  of  money. 
Here’s  what  some  are  doing  about  it.  Page  23 


Moving  Pictures 

In  the  Technology  section:  Mobile  video 
is  a  reality  for  consumers,  especially  in 
Asia,  and  it  shows  promise  as  a  busi¬ 
ness  application  —  but  not  for  the  near 
future.  Page  28 
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Microsystems  works  with 
Wyse  on  server-based  clients. 

4  HP  wins  the  bidding  for  the 

Interex  member  database  and 
says  it  will  protect  the  person¬ 
al  data  of  its  customers. 

5  Bank  of  America  plans  to  begin 
updating  its  service-oriented 
architecture,  which  will  be 
based  on  IBM’s  IFW  informa¬ 
tion  architecture  blueprint. 

5  A  federal  commission  recom¬ 
mends  a  nationwide  patient 
authentication  system  to 
speed  the  adoption  of  elec¬ 
tronic  health  records. 

8  Q&A:  Standard  Chartered 
Bank  IT  security  chief  John 
Meakin  says  the  bank  can 
manage  risks  by  prioritizing 
the  patching  of  key  systems. 

8  Children’s  Hospital  in  Boston 
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backup  procedures  to  disk-to- 
disk  technology. 

10  Microsoft  will  ship  upgraded 
CRM  apps  ahead  of  schedule, 
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sion  last  spring. 

14  Global  Dispatches:  Telefonica 
agrees  to  buy  mobile  network 
operator  02  PLC;  Qualcomm 
disputes  charges  of  unfair 
pricing  practices  in  Europe. 

14  Sun’s  1TB  tape  drive  is  the 
first  fruit  of  its  purchase  of 
StorageTek. 


30  Future  Watch:  Can  You  Un¬ 
derstand  Me  Now?  Voice 
applications  such  as  interac¬ 
tive  voice  response  are  finally 
ready  to  live  up  to  their 
promise. 

32  Geek’s  Garden.  This  week, 
we  highlight  the  lowdown  on 
space  elevators,  the  first  pro¬ 
grammer  and  a  discovery 
that’s  likely  to  make  quantum 
computing  more  feasible. 

34  Security  Manager’s  Journal: 
How  to  Get  a  Job  in  the  Info- 
sec  Field.  C.J.  Kelly’s  readers 
wrote  to  ask  her  where  the  IT 
security  jobs  are,  so  she  did  a 
little  research. 

MANAGEMENT 

39  China  Syndrome.  Some  of  the 
hottest  spots  in  the  global 
marketplace  are  the  worst 
offenders  when  it  comes  to 
technology  counterfeiting.  If 
your  company  has  worldwide 
operations,  you’re  especially 
vulnerable.  Here’s  how  to 
minimize  your  risk. 

42  Double  Dipping  on  Sarb-Ox. 

No  doubt  about  it:  Complying 
with  the  Sarbanes-Oxley  Act 
can  be  pricey.  But  with  cre¬ 
ativity  and  foresight,  some 
companies  are  getting  a  lot 
more  out  of  their  compliance 
budgets. 

46  Career  Watch.  A  young  main- 
framer  sees  infinite  opportu¬ 
nities:  the  loss  of  tech  jobs 
continues;  and  why  women 
pursue  careers  in  IT. 


6  On  the  Mark:  Mark  Hall 

reports  on  one  vendor  exec’s 
view  that  relying  on  program¬ 
ming  heroes  to  save  founder¬ 
ing  app-dev  projects  is  a  sign 
that  the  development  process 
is  immature. 

20  Don  Tennant  doesn’t  condone 
software  piracy,  but  he  does 
recognize  that  the  big  U.S. 
software  makers  helped  foster 
a  predisposition  to  it. 

20  Bruce  A.  Stewart  has  ideas 
for  making  life  more  interest¬ 
ing  during  cautious  IT  times. 

21  David  Moschella  sees  a  need 
for  corporate  IT  to  ask  the  sorts 
of  questions  that  business  peo¬ 
ple  routinely  ask  themselves. 

36  Jian  Zhen  says  IT  administra¬ 
tors  can  make  root-cause 
analysis  more  efficient  by 
using  full-text  indexed 
Boolean  search. 

48  Paul  Glen  offers  advice  on 
how  to  minimize  the  angst  of 
firing  a  subordinate. 

52  Frankly  Speaking:  Frank 

Hayes  thinks  it’s  good  when 
users  develop  their  own  apps, 
because  when  IT  steps  in  to 
fix  them  up,  they  already 
know  what  users  want  the 
things  to  do. 
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AT  DEADLINE 


Oracle  CFO  to  Leave 
After  Four  Months 

Oracle  Corp.  lost  a  second  chief 
financial  officer  this  year  with  the 
resignation  of  Greg  Maffei.  In  a 
statement,  CEO  Larry  Ellison  said 
Maffei  is  leaving  for  “a  terrific 
professional  opportunity.”  The 
former  Microsoft  Corp.  executive 
joined  Oracle  in  late  June  to  re¬ 
place  Harry  You,  who  resigned  af¬ 
ter  eight  months  as  CFO  to  be¬ 
come  CEO  of  BearingPoint  Inc. 


Cisco  Discloses 
Router  App  Flaw 

Cisco  Systems  Inc.  has  published 
a  patch  for  a  flaw  in  its  Internet¬ 
working  Operating  System,  which 
powers  its  routers.  The  flaw,  rated 
“critical”  by  the  French  Security 
Incident  Response  Team,  affects 
the  IOS  timers  that  run  some  sys¬ 
tem  tasks.  Under  certain  condi¬ 
tions,  the  flaw  can  allow  attack¬ 
ers  to  take  control  of  a  router  and 
then  use  the  system  timers  to  run 
malicious  code. 


Veritas  Deal  Blamed 
For  Symantec  Loss 

Symantec  Corp.  stumbled  in  its 
second  quarter,  reporting  a  large 
loss  on  charges  associated  with 
its  Veritas  Software  Corp.  acqui¬ 
sition.  Symantec  also  warned  that 
the  results  in  the  current  quarter 
wiil  be  worse  than  projected. 


EDS  Plans  to  Resell 

Fujitsu  Servers 

Electronic  Data  Systems  Corp. 
has  reached  an  agreement  with 
Fujitsu  Ltd.  to  resell  Fujitsu’s  Ita¬ 
nium  2-based  PrimeQuest  servers 
and  other  hardware  as  part  of  its 
service  packages.  Over  the  next 
"ves  years,  Fujitsu  hopes  to  sell 
t  00  servers  via  EDS,  one-fifth 
of  ihs  systems’  expected  total 
sati  £DS  will  also  offer  Fujitsu's 
Siylispc  and  LifeBook  tablet  PCs. 


HR  Sun  Take  Different 
Paths  With  Thin  Clients 


HP  rolls  out  blade 
PCs;  Sun  works  on 
server-based  clients 

BY  PATRICK  THIBODEAU 

UN  MICROSYSTEMS  Inc. 
and  Hewlett-Packard 
Co.  are  each  offering 
new  thin-client  com¬ 
puting  technologies,  but 
they’re  giving  users  different 
choices:  server-based  clients 
versus  ones  that  are  supported 
by  rack-mounted  blade  PCs. 

HP  today  plans  to  start  ship¬ 
ping  blade  PCs  equipped  with 
a  version  of  Advanced  Micro 
Devices  Inc.’s  Athlon  proces¬ 
sor  developed  for  the  new  sys¬ 
tems.  The  devices  replace  a 
line  of  desktop  blades  based 
on  Transmeta  Corp.’s  Efficeon 
processor.  HP  put  sales  of 
those  models  on  hold  in  Janu¬ 
ary,  when  Transmeta  said  it 
would  stop  making  Efficeon. 

Sun,  which  offers  the  Sun 
Ray  line  of  thin  clients,  last 
week  announced  a  deal  under 
which  thin-client  market 
leader  Wyse  Technology  Inc. 
will  bundle  its  devices  with 
software  that  Sun  acquired 
when  it  bought  Tarantella  Inc. 
in  July. 

The  software,  called  Secure 
Global  Desktop,  lets  thin 


clients  access  applications  on 
a  variety  of  systems,  including 
ones  running  Windows,  Linux 
or  Unix. 

The  business  arguments  for 
moving  to  either  server-based 
thin  clients  or  blade  PCs  in 
data  centers  are  similar.  Both 
technologies  promise  IT  cost 
reductions  through  more  cen¬ 
tralized  systems  management 
and  reduced  desktop  support 
needs.  But  that’s  where  agree¬ 
ment  ends  among  users  and 
among  vendors. 

Michael  Sexton,  director 
of  IT  at  Princeton  Resorts 
Group  LLC  in  Phoenix,  is 
supporting  about  200  of  his 
end  users  with  Wyse  thin 
clients  attached  to  servers 
that  run  the  company’s  Win¬ 
dows  and  terminal  server 
applications.  Blade  PCs  aren’t 
attractive  to  him  because 
they’re  more  complicated 


THIN  OUTLOOK 

Projected  growth  in  world¬ 
wide  unit  shipments  of  thin 
client  devices  between  last 
year  and  2009 

2004: 1.6  million 

2009: 5.3  million 

rnMPm  twn  anni  iai  growth  ratf-  i?  to, 


SOURCE:  IDC,  FRAMINGHAM,  MASS. 


»l  don’t  have 
200  CPUs 
that  can  go  bad,  [or] 
400  sticks  of  RAM. 

I  only  have  nine 
servers. 


MICHAEL  SEXTON,  DIRECTOR  OF  IT. 
PRINCETON  RESORTS  GROUP  LLC 

to  support  than  the  Wyse 
devices  are,  he  said. 

“I  don’t  have  200  CPUs  that 
can  go  bad,  [or]  400  sticks  of 
RAM,”  Sexton  said.  “I  only 
have  nine  servers.” 

But  Roger  Neal,  IT  director 
at  Duncan  Regional  Hospital 
in  Duncan,  Okla.,  advocates 
the  use  of  blade  PCs.  He  has 
installed  blade  devices  devel¬ 
oped  by  ClearCube  Technolo¬ 
gy  Inc.  to  support  more  than 
220  end  users. 

Blade  PCs  “are  going  to  con¬ 
tinue  to  grow  [in  performance 
and  functionality]  as  fast  as 
the  normal  desktop,  and  I 
think  that  is  a  little  bit  of  an 
advantage”  over  server-based 
thin  clients,  Neal  said.  Blades 
also  require  less-specialized 
skills  within  IT  than  server- 
based  thin  clients,  which  may 
need  employees  with  Citrix 
training,  he  added. 


HP’s  Athlon-based  blades 
will  support  one  user  per  de¬ 
vice  and  provide  a  standard 
corporate  desktop  image  that’s 
indistinguishable  from  what 
users  would  get  on  a  desktop 
PC,  said  Tad  Bodeman,  direc¬ 
tor  of  client  consolidation 
solutions  at  HP’s  personal 
systems  group. 

One  of  the  reasons  HP  went 
with  the  Transmeta  chip  was 
its  relatively  low  power  use, 
with  each  blade  using  about  25 
watts,  but  HP  says  the  AMD 
chip  is  similar. 

In  addition  to  the  Windows- 
based  blade  PCs,  HP  offers  a 
range  of  server-based  thin 
clients  that  support  a  variety 
of  operating  systems.  Similar¬ 
ly,  Sun  and  Wyse  said  that 
embedding  the  Secure  Global 
Desktop  software  in  a  thin 
client  will  allow  the  device  to 
deliver  applications  from  any 
source  via  a  network  server. 

Blade  PCs  are  “not  really  a 
solution  in  a  heterogeneous 
environment”  because  they 
usually  rely  on  Windows,  said 
Greg  Wolff,  director  of  desk¬ 
top  infrastructure  software 
at  Sun. 

One  certainty  is  that  inter¬ 
est  in  thin  clients  among  cor¬ 
porate  users  is  increasing,  said 
Bob  O’Donnell,  an  analyst  at 
IDC.  Thin  clients,  whether 
they’re  running  off  a  blade  PC 
or  a  server,  currently  account 
for  just  over  3%  of  all  corpo¬ 
rate  desktops,  according  to 
O’Donnell.  By  2009,  that  fig¬ 
ure  is  expected  to  increase  to 
about  8%,  he  said.  ©  58003 


HP  Wins  Bidding  for  Interex’s  Member  Data 


Vendor  says  it  will 
protect  information 
collected  on  users 

BY  PATRICK  THIBODEAU 

Hewlett-Packard  Co.  was 
the  high  bidder  for  the  now- 
defunct  Interex  user  group’s 
customer  database  and  mail¬ 
ing  list,  which  were  auctioned 
off  late  last  month  in  a  sale 
sanctioned  by  a  bankruptcy 
court  judge  in  California. 

HP  offered  $66,500  for  the 
database  and  mailing  list,  top¬ 


ping  two  other  bidders.  Legal 
documents  detailing  the  result 
of  the  bidding  process  were 
filed  last  Monday  in  U.S.  Bank¬ 
ruptcy  Court  for  the  Northern 
District  of  California. 

By  purchasing  what  are,  in 
effect,  the  records  of  its  own 
customers,  HP  sees  itself  as 
being  akin  to  a  white  knight. 

The  company  wouldn’t 
comment  on  how  it  plans  to 
use  the  information,  but  HP 
spokesman  Don  Gentile  said 
the  Interex  data  is  being  pur¬ 
chased  “to  ensure  that  the  pri¬ 


vacy  of  our  customers  would 
not  be  compromised.” 

Sunnyvale,  Calif.-based  In¬ 
terex  filed  for  Chapter  7  bank¬ 
ruptcy  protection  in  August 
after  closing  its  operations  in 
July  and  canceling  its  annual 
HP  World  conference.  HP 
World  faced  new  competition 
from  a  technical  conference 
launched  by  HP  this  year. 

The  user  group  shut  down 
after  incurring  about  $4  mil¬ 
lion  in  debt,  and  the  sale  of 
the  customer  database  and 
mailing  list  by  the  court- 


appointed  trustee  overseeing 
Interex’s  remaining  assets  was 
designed  to  help  pay  off  its 
creditors. 

The  bidding  process  began 
after  Redmond,  Wash.-based 
Genisys  Corp.,  which  sells  re¬ 
furbished  HP  hardware,  of¬ 
fered  to  buy  the  database  for 
$15,000  [QuickLink  57541]. 
Trustee  Carol  W.  Wu  then 
conducted  an  auction-style 
sale  after  receiving  competing 
bids  from  HP  and  a  third  bid¬ 
der  that  wasn’t  identified  in 
the  court  papers.  ©  57999 
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Bank  of  America  Ready  to 
Begin  Work  on  SOA  Update 


System  expansion 
needed  for  surge 
in  transactions 

BY  HEATHER  HAVENSTEIN 

Bank  of  America  Corp.  plans 
to  soon  begin  work  on  the 
third  generation  of  its  service- 
oriented  architecture  to  sup¬ 
port  an  expected  doubling  of 
Web  services  transactions 
from  its  current  550  million 
per  month. 


The  next-generation  SOA, 
expected  by  the  third  quarter 
of  next  year,  will  use  IBM’s  In¬ 
formation  FrameWork  (IFW), 
a  set  of  business  models  and 
an  information  architecture 
blueprint,  to  integrate  applica¬ 
tion  processes. 

Bank  of  America  is  still 
negotiating  with  IBM  for  an 
enterprise  license,  said  Kim 
Kazmaier,  senior  integration 
architect  at  the  Charlotte, 
N.C.-based  bank. 


Kazmaier  said  the  IFW  will 
allow  Bank  of  America  to  map 
business  requirements,  such  as 
automating  the  entire  proce¬ 
dure  of  opening  new  accounts, 
into  a  business  process  that  is 
linked  using  Web  services. 

“That  is  a  real-world  exam¬ 
ple  of  a  reference  model  [that] 
fully  describes  those  steps  and 
defines  services  interfaces  for 
the  steps,”  he  said.  “Without 
a  reference  architecture,  you 
can  spend  an  inordinate 


amount  of  time  and  energy 
building  and  maintaining  that 
holistic  view  of  the  process.” 

The  bank  plans  to  begin  us¬ 
ing  IFW  by  the  end  of  this 
year  to  map  out  new  standard 
processes  within  its  SOA  that 
can  cross  customer  channels 
such  as  online  banking  and 
call  centers.  By  next  Septem¬ 
ber,  Kazmaier  said,  he  expects 
the  bank  to  have  added  to  pro¬ 
duction  20  to  30  Web  services 
using  IFW. 

The  new  SOA  model  will 
build  on  the  current  second- 
generation  system,  which  is 
based  on  the  integration  plat¬ 
form  of  Fairfax,  Va.-based 
WebMethods  Inc.  and  inte¬ 
grates  existing  applications. 


Federal  Panel  Pushes 
Plan  for  EHR  Adoption 


Sends  Congress 
14  proposals 


BY  JA1KUMAR  VIJAYAN 

A  federal  commission  late  last 
month  called  for  a  national  pa¬ 
tient  authentication  system  to 
enable  faster  adoption  of  elec¬ 
tronic  health  records  (EHR). 

The  Commission  on  Sys¬ 
temic  Interoperability,  estab¬ 
lished  by  the  Medicare  Mod¬ 
ernization  Act  of  2003,  also 
proposed  creating  financial 
incentives  to  help  convince 
health  care  providers  to  adopt 
an  EHR  plan  and  recommend¬ 
ed  the  abolition  of  regulations 
that  may  hinder  the  adoption 
of  the  technology. 

In  a  report  submitted  to 
Congress  on  Oct.  25,  the  com¬ 
mission  listed  14  recommen¬ 
dations  focused  on  three  areas: 
adoption  challenges,  interop¬ 
erability  of  health  care  data 
and  secure  connectivity  be¬ 
tween  networks.  The  commis¬ 
sion’s  charter  ended  Oct.  31. 

The  report  highlights  the 
challenges  in  implementing  a 
connected  system  of  instantly 
accessible  health  records,  said 
Robert  Seliger,  chairman  of 
the  Chicago-based  Healthcare 
Information  and  Management 
Systems  Society’s  steering 


committee  on  integration  and 
interoperability. 

Though  there  have  been 
calls  over  the  past  several 
years  to  make  patient  informa¬ 
tion  more  easily  accessible  to 
providers  and  patients,  cost  is¬ 
sues,  security  and  privacy  con¬ 
cerns,  and  a  lack  of  interoper¬ 
ability  have  been  major  stum¬ 
bling  blocks  to  implementa¬ 
tion,  said  Seliger,  also  CEO  of 
Sentillion  Inc.,  an  Andover, 
Mass.-based  vendor  of  identi¬ 
ty  management  technologies. 

Overcoming  Roadblocks 

The  commission’s  recommen¬ 
dations  aim  to  overcome  such 
roadblocks,  said  Scott  Wallace, 
chairman  of  the  commission 
and  president  of  The  National 
Alliance  for  Health  Informa¬ 
tion  Technology,  a  Washing- 
ton-based  organization  that 
promotes  the  use  of  IT  sys¬ 
tems  in  health  care. 

For  instance,  a  Social  Secu¬ 
rity-type  identification  system 
could  be  used  by  physicians  to 
quickly  get  data  on  individual 
patients,  Wallace  said. 

A  patchwork  of  privacy  laws 
in  different  states  also  poses  a 
challenge  to  the  implementa¬ 
tion  of  EHR,  Wallace  said.  To 
address  that  problem,  the 
commission  proposed  a  na¬ 


tional  privacy  standard  based 
on  the  federal  Health  Insur¬ 
ance  Portability  and  Account¬ 
ability  Act,  Wallace  said. 

“On  the  adoption  side,  we 
focused  on  the  need  for  finan¬ 
cial  incentives”  for  health  care 
providers,  Wallace  said,  ac¬ 
knowledging  that  an  EHR  sys¬ 
tem  offers  more  benefits  to 
other  groups.  In  fact,  he  said, 
consumers  and  insurance 
companies  are  the  biggest 
potential  beneficiaries  of  a 
connected  health  care  system. 

Sam  Karp,  chief  program 
officer  at  the  California 
Healthcare  Foundation,  an 
Oakland-based  nonprofit 
organization  focused  on  im¬ 
proving  health  care  in  the 
state,  noted  that  there  is  little 
immediate  incentive  for 
providers  to  support  EHR. 

“By  far  the  biggest  hurdle 
is  cost,  which  is  why  there 
has  been  very  little  adoption 
so  far”  beyond  large  health 
care  providers  that  can  afford 
it,  he  said. 

“This  is  still  a  developing 
market,”  Karp  said.  “Physicians 
who  are  being  asked  to  make  a 
significant  capital  outlay  on 
systems  want  to  be  assured 
that  the  investments  they  are 
making  will  be  sound.” 

The  commission  also  recom¬ 
mended  using  product  certifi¬ 
cation,  interoperable  data 
standards,  and  standard  prod¬ 
uct  identifiers  and  vocabulary 
to  ensure  that  health  care  data 
is  accessible  as  needed. 


Health  Care 
IT  Efforts 

Government  programs  and 
departments  focused  on  health 
care  IT  efforts: 

■  American  Health  Information 
Community:  Established  in  June 
2005  by  Department  of  Health 
and  Human  Services  Secretary 
Mike  Leavitt  to  develop  common 
standards  for  electronic  health 
records. 


t  ■  Agency  for  Healthcare  Re- 
S  search  and  Quality:  Originally 
|  created  in  1989;  reauthorized  in 
§  1999  to  sponsor  projects  that  are 
I  focused  on  a  range  of  health  care 
|  IT  projects,  including  EHR. 

uj  •*«••##♦*♦•••••* 
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w  ■  Center  for  Medicare  and 
§  Medicaid  Services:  Supports 
1  several  initiatives  involving  health 
1  care  IT,  including  a  project  that 
o  provides  primary  care  physicians 
with  information  on  more  than  60 
i  private  EHR  systems. 

O 

if) 

Karp  said  those  recommen¬ 
dations  are  helpful  because  of 
the  current  lack  of  product 
standards. 

Not  long  before  the  com¬ 
mission’s  charter  ended,  U.S. 
Health  and  Human  Services 
Secretary  Mike  Leavitt  formed 
the  American  Health  Informa¬ 
tion  Community  to  provide 
recommendations  on  how  to 
make  health  records  digital 
and  interoperable  while  en¬ 
suring  the  privacy  and  securi¬ 
ty  of  those  records.  ©  57998 


Bank  of  America  now  has 
about  100  Web  services  that 
integrate  1.8  billion  customer 
interactions  per  month  occur¬ 
ring  online,  in  call  centers  and 
branches,  and  at  ATMs. 

For  example,  Web  services 
support  all  voice  response  for 
call  centers,  as  well  as  money 
transfers  and  transaction  his¬ 
tories  for  online  banking. 

Using  IFW,  the  bank  expects 
to  more  quickly  develop  new 
Web  services  at  a  lower  cost 
while  also  forging  closer  ties 
between  IT  and  the  business, 
Kazmaier  added. 

“The  business  talks  about 
how  they  can  increase  rev¬ 
enue  by  improving  customer 
service,”  he  said.  “The  busi¬ 
ness  can  communicate  what 
their  requirements  are,  and  we 
can  show  the  business  what 
the  process  would  be.” 

ESB  on  the  Way 

Bank  of  America  also  plans  to 
deploy  an  enterprise  service 
bus  (ESB)  as  part  of  the  next- 
generation  SOA  to  help  it 
monitor  Web  service  compli¬ 
ance  with  service-level 
agreements.  The  bank  is  still 
gathering  requirements  for  the 
ESB  it  will  select  for  the  proj¬ 
ect.  Kazmaier  declined  to  pro¬ 
vide  details  about  those  plans. 

Bank  of  America  launched 
its  first  SOA  in  1998  with  a 
middleware  message-oriented 
system  using  the  Java  Message 
Service  standard  and  IBM 
MQSeries  middleware. 

In  2001,  as  the  bank  was 
preparing  to  roll  out  a  new 
J2EE-based  customer  interac¬ 
tion  system,  it  began  using 
XML  and  Web  services  to  in¬ 
tegrate  existing  applications 
into  the  new  system. 

In  2002  and  2003,  bank  offi¬ 
cials  replaced  the  first-genera¬ 
tion  SOA  with  WebMethod’s 
platform,  which  provides  Web 
services  adapters  to  integrate 
customer  data  over  multiple 
channels. 

Bank  of  America  and  Wells 
Fargo  Bank  are  among  the 
biggest  users  of  SOA  technol¬ 
ogy  in  terms  of  the  number 
and  quality  of  Web  services 
they  have  in  production,  said 
Jason  Bloomberg,  senior  ana¬ 
lyst  at  ZapThink  LLC  in  Cam¬ 
bridge,  Mass.  ©  57997 
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Dell  Revenue  to  Fall 
Short  of  Guidance 

Dell  Inc.  said  it  will  take  a  charge 
of  S450  million  after  third-quarter 
results  fell  short  of  projections 
because  of  lower-than-expected 
sales.  Dell  said  it  will  take  the 
charge  to  restructure  its  workforce 
and  replace  broken  OptiPlex  desk¬ 
top  systems.  Third-quarter  rev¬ 
enue  is  expected  to  be  S13.9  billion 
versus  the  earlier  projection  of 
S14.1  billion  to  $14.5  billion.  Dell 
will  report  its  earnings  Thursday. 


Sun  Sales  Are  Up, 
But  Losses  Persist 

Despite  some  bright  spots,  with 
improved  sales  of  its  Opteron- 
based  server  line  and  midrange 
storage  arrays,  Sun  Microsystems 
Inc,  reported  another  net  loss  for 
its  first  fiscal  quarter. 


SUN  BY  THE  NUMBERS  | 

REVENUE  | 

S2.7B 

(S123M) 

Q1’05 

S2.6B 

(S133M) 

Case  Resigns  From 
Time  Warner  Board 

America  Online  Inc.  co-founder 
Steve  Case  has  resigned  from 
Time  Warner  Inc.’s  board  of  direc¬ 
tors.  Case  is  leaving  Time  Warner 
to  devote  more  time  to  Revolution 
Health  Group,  an  investment 
company  he  launched  in  April 
with  stakes  in  health  care  and 
hospitality  businesses.  Case 
remains  a  major  Time  Warner 
shareholder. 


AMO,  IBM  Extend 

Technology  Pact 

Advanced  Micro  Devices  Inc.  has 
expanded  a  chip  technology  part¬ 
nership  with  IBM  to  include  ex¬ 
ploratory  research  into  a  range  of 
advanced  chip-related  technolo¬ 
gies  through  2011.  The  agreement 
was  set  to  expire  in  2008.  It  calls 
for  the  companies  to  collaborate 
ors  the  development  of  new  tran¬ 
sistor,  interconnect,  lithography 
.ori  die-to -package  connection 
technologies. 
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IT’s  ‘Hero  Culture’ 
Stunts  Growth . . . 

...  of  mature  application  development  processes.  Many  IT 
shops  expect  their  top  programmers  to  save  the  day 
on  foundering  app-dev  projects,  says  Erik  Frieberg, 
vice  president  of  marketing  and  strategy  at  Borland 
Corp.  in  Scotts  Valley,  Calif.  But  that  only  shows  how 


immature 
their  soft¬ 
ware  devel¬ 
opment 
processes 
are,  Frieberg 
argues.  He 
contends  that 
an  “IT  hero 
culture”  con¬ 
tributes  to 
the  continuing  failure  of  proj¬ 
ects  in  the  eyes  of  end  users 
because  coding  saviors  often 
come  late  to  a  project  and 
aren’t  immersed  in  the  busi¬ 
ness  requirements.  His  evi¬ 
dence?  An  annual  report  from 
The  Standish  Group  Interna¬ 
tional  Inc.  that  says  66%  of  IT 
projects  last  year  were  per¬ 
ceived  to  have  failed  in  some 
way.  “Business  users  tend  to 
remember  the  initial  require¬ 
ments,  while  IT  recalls  what 
was  agreed  to  after  the  pro¬ 
ject  was  scaled  back,” 

Frieberg  says.  To  help  im¬ 
pose  project  discipline,  IT 
should  use  application 
life-cycle  management 
(ALM)  technology, 

Frieberg  suggests.  Microsoft 


Corp.  and  IBM  have  such  of¬ 
ferings,  but  Frieberg  hopes 
you’ll  consider  his  company’s 
wares.  In  next  year’s  first 
quarter,  Borland  plans  to  up¬ 
date  Core  Analyst,  one  of  its 
ALM  tools.  New  features  will 
include  improved  project  sto¬ 
ryboarding  techniques  de¬ 
signed  to  better  show  how 
data  flows  through  a  new  ap¬ 
plication,  as  well  as  a  refresh 
of  rapid  prototyping  features. 

Boost  your  WAN’s 
pokey  performance . . . 

...  by  installing  data  accelera¬ 
tion  appliances.  Richard 
Pierce,  CEO  of  Orbital  Data 
Corp.  in  San  Mateo,  Calif., 
says  the  “demand  profile” 
for  WAN  optimization  has 
changed  from  point-to-point 
needs  to  servicing  numerous 
branch  offices  that  access 
multiple  data  centers.  That 


Orbital  6800  speeds  up  WAN  traffic. 


shift  means  WAN  op¬ 
timization  technology 
has  to  account  for  the 
constant  flux  in  net¬ 
work  traffic,  he  says. 

Lucky  for  you,  Pierce 
claims  his  company’s 
new  Orbital  6000  ap¬ 
pliance  family  with 
automatic  optimiza¬ 
tion  software  can  detect  spe¬ 
cific  compression  and  accel¬ 
eration  techniques  needed  by 
applications.  For  example,  he 
says,  Windows  users  bogged 
down  by  Microsoft’s  chatty 
Common  Internet  File  Sys¬ 
tem  should  get  a  performance 
lift  from  Orbital’s  predictive 
prefetching  scheme,  which 
grabs  next-in-line  data  before 
the  application  requests  it. 
Available  this  week,  the  Or¬ 
bital  6800  handles  data  rates 
of  up  to  lGbit/sec.  and  starts 
at  $21,000;  the  6500  works  at 
up  to  45Mbit/sec.  and  is 
priced  from  $5,000. 

Endpoint  security 
software . . . 

. . .  checks  up  on  PCs  and  other 
devices  trying  to  get  on  a  net¬ 
work.  McAfee  Inc.  plans  to  re¬ 
lease  a  beta  of  its  Policy  En¬ 
forcer  software  by  the  end  of 
the  month  and  ship  the  prod¬ 
uct  early  next  year.  According 
to  Michelle  Cobb,  a  group 
product  manager  at  McAfee, 
the  tool  can  check  more  than 
400  security  parameters  on 
computers  before  they  access 
your  network,  ensuring  that 
the  machines  meet  policies 
on  everything  from  operating 
system  patches  to  antivirus 
software.  You’ll  also  need 
McAfee’s  ePolicy  Orchestra- 
tor,  which  Cobb  claims  has 
already  been  installed  by 
30,000  customers. 

The  corporate  share  of 
wireless  data . . . 

. . .  services  remains  flat,  as 
consumers  continue  to  domi¬ 
nate  the  airwaves.  A  report 
being  released  this  week  by 
Boston-based  Yankee  Group 
Research  Inc.  predicts  that 


2.4B 

Global  users  of 
wireless  voice 
and  data 
services  in 
2009,  says 
Yankee  Group. 


the  enterprise 
portion  of  wireless 
data  services  will  bare¬ 
ly  budge  by  2009,  from 
9.8%  of  the  total  this 
year  to  9.9%.  “Business 
users  still  like  voice,” 
says  Yankee  analyst 
Keith  Mallinson.  And, 
not  surprisingly,  the 
report  indicates  that  by  2009, 
the  lion’s  share  of  new  wire¬ 
less  voice  subscribers  —  41% 
—  will  be  in  China  and  India. 
But  Mallinson  notes  that 
while  the  number  of  wireless 
voice  users  in  India  will  more 
than  double  in  the  next  Five 
years,  it  will  amount  to  only 
14.5%  of  the  population,  com¬ 
pared  with  more  than  90% 
saturation  in  many  European 
countries. 

Military-grade  security 
tool  is  destined . . . 

...  for  use  on  thin  clients.  Ed 

Hammersla,  CEO  of  Trusted 
Computer  Solutions  Inc.  in 
Herndon,  Va.,  says  his  compa¬ 
ny  has  signed  a  nonexclusive 
deal  to  port  its  NetTop2  data 
access  software  to  Wyse 
Technology  Inc.’s  thin-client 
devices.  With  NetTop2, 
which  is  in  beta  testing,  gov¬ 
ernment  ana¬ 
lysts  and 
contractors 
who  use  the 
Wyse  de¬ 
vices  will  be 
able  to  ac¬ 
cess  multiple 
classified 
databases 
and  applica¬ 
tions  from  a 
single  thin  client.  Hammersla 
says  the  users  currently  need 
dedicated  terminals  for  each 
data  source.  NetTop2  will 
work  on  systems  that  are 
running  secure  versions  of 
Linux  based  on  the  National 
Security  Agency’s  Security- 
Enhanced  Linux  technology. 
That  will  include  Red  Hat 
Enterprise  Linux  Version  5 
when  it  ships  next  year,  Ham¬ 
mersla  says.  ©  57965 


HAMMERSLA 

says  software 
reduces  desk¬ 
top  clutter. 
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Samsung  displays.  Turn  business  on. 

.  iste  i  *  SH?'' 


The  Samsung  242MP  display.  Explore  more  of  what’s  out  there. . 

One  took  and  you’ll  see  how  the  combination  of  a  computer  display,  a  television'  and  a  radio 
can  become  your  ultimate  source  of  knowledge.  And  why  Samsung  is  the  leadinp'djsplay ; 
brand  in  the  world.*  So  when  you’re  serious  about  business,  turn  on  a  Samsatn^^hd,'tu|“ 
yourself  on  to  a  whole  new  way  of  seeing  things;  www.samsung.corn/monitor  $jt{4  Ife 

©2005  Samsung  Electronics  America,  Inc.  Samsung  is  a  registered  trademark. of  Samsung  Electronics  Co.,  Ltd,  ■  «  : ■■ ; 

Screen  images  simulated.  "Global  market  share  leader  based  on  2004  iSuppli  CorporatipFr  Rating. r.  .  L 
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Bank  Moves  to  Prioritize 
Patching  of  Key  Systems 


BY  JAIKUMAR  VIJAYAN 

HE  CONSTANT  NEED 
to  patch  systems  on 
its  global  network 
has  driven 
Standard  Chartered 
Bank  to  adopt  a  risk- 
based  approach  to  man¬ 
aging  security  vulnerabilities. 
Instead  of  rushing  to  patch 
every  flaw  disclosed  by  its  soft¬ 
ware  vendors,  the  London- 
based  bank  plans  to  identify  the 
most  pressing  problems  and 
prioritize  its  responses  based 
on  the  value  of  the  IT  assets  at 
risk.  John  Meakin,  group  head  of 
information  security  at  Stan¬ 
dard  Chartered,  discussed  the 
bank’s  strategy  with  Comput- 
erworld  late  last  month. 

What’s  driving  this  whole  effort? 

Deploying  patches  across  a 
global  network  is  a  big  chal¬ 
lenge.  Given  that  we  have  al- 


|  ready  invested  in  automated 
[patch]  distribution  [and]  that 
we  think  we  have  a  very  effi- 
I  cient  way  of  capturing  the 
initial  information 
about  a  vulnerability 
and  a  patch,  we  were 
looking  to  see  what 
other  scope  we  had  of  making 
this  problem  less  intractable. 

How  have  you  gone  about  doing 
that?  We  really  have  said  the 
only  way  of  solving  this  prob¬ 
lem  is  to  truly  target  where 
we  deploy  patches  and  when. 
Clearly,  some  of  the  servers  on 
our  network  are  more  impor¬ 
tant  than  others  in  terms  of 
the  impact  on  our  business. 
Equally,  some  of  those  servers 
are  subject  to  a  greater  likeli¬ 
hood  of  any  vulnerability  on 
them  being  exploited.  By  mea¬ 
suring  these  two  factors 
across  the  whole  asset  inven¬ 


tory  on  our  network,  we’re 
able  to  know  which  of  our 
high-value  boxes  are  most 
exposed  when  new  patches 
are  released. 

How  big  a  challenge  has  it  been? 

It’s  very  simple,  very  logical 
and  very  easy  [conceptually]. 
But  actually  doing  it  is  a  chal¬ 
lenge  in  itself.  First  of  all,  it 
presupposes  that  you  have  a 
very  accurate  asset  inventory. 
We’ve  already  made  some  in¬ 
vestments  on  our  network 
which  have  given  us  the  begin¬ 
nings  of  that  asset  inventory. 

Secondly,  we  have  made  in¬ 
vestments  in  tools  which  scan 
for  the  existence  of  vulnerabil¬ 
ities.  The  third  piece  of  the 
puzzle,  as  an  add-on  to  asset 
inventory,  is  a  measure  of  just 
how  valuable  each  box  is, 
based  on  the  data  and  the  ap¬ 
plication  that  it  supports. 


The  last  piece  of  the  picture  is 
the  ability  to  model,  in  a  re¬ 
peatable  way,  how  easy  it  is  for 
a  vulnerability  on  a  particular 
box  to  be  exploited.  If  you  add 
this  piece,  all  of  a  sudden  what 
was  once  an  impossible  task 
becomes  a  more  possible  task. 

How  effective  has  the  risk-based 
strategy  been  in  helping  you  deal 
with  vulnerabilities?  We  haven’t 
finished  this  yet.  We’ve  taken 
the  risk-driven  approach  over 
a  period  of  the  last  two  to 
three  years.  We  started  focus¬ 
ing  our  efforts  by  scanning  for 
where  the  vulnerabilities  are, 
and  certainly  wre  have  de¬ 
ployed  our  proprietary  risk  in¬ 
ventory  in  order  to  target  the 
work  of  patching.  Going  for¬ 
ward,  we’re  adding  this  final 
threat-modeling  piece. 

But  you’ll  still  be  patching  all  of 
your  systems,  right?  Exactly. 

We  would  have  a  patch  cycle 
where  we  first  deal  with 
value-high/exposure-high 
systems,  then  value-medium/ 
exposure-high,  value-medium/ 
exposure-medium  and  so  on. 


We’ll  leave  the  low-value/ 
low-risk  systems  until  we  have 
a  regular  software  release. 

How  easy  has  it  been  getting  busi¬ 
ness  managers  to  participate  in 
the  process  of  rating  the  risks  to 
systems?  Not  easy.  I  would 
still  say  that  we  get  50-50  di¬ 
rect  participation  of  business 
users.  Sometimes  it’s  a  busi¬ 
ness-aligned  IT  guy  who  is 
engaged  in  the  evaluation 
process. 

The  process  itself  is  sort  of 
self-correcting  and  is  really 
quite  sensitive  to  overvalua¬ 
tion.  If  I  walk  into  one  of  our 
[business  unit]  head’s  office 
and  ask  him  how  valuable  a 
system  is,  his  natural  reaction 
is  to  say  “high.”  What  we’ve 
found  gets  better  business  in¬ 
volvement  is  when  we  go  back 
and  say  to  them,  “OK,  you’ve 
gone  through  this  valuation 
process  and  come  out  with  a 
5  for  confidentiality,  integrity 
and  availability.  You  do  real¬ 
ize  that  means  you’ve  got  to 
make  the  maximum  invest¬ 
ment  in  securing  those  sys¬ 
tems?”  O  57980 


Children’s  Hospital  Trims 
Backup  With  Disk-to-Disk 


Now  urgent  restore 
requests  are  met  in 
minutes,  not  hours 

BY  LUCAS  MEARIAN 

Children’s  Hospital  in  Boston 
was  dealing  with  a  tape  back¬ 
up  nightmare  early  this  year, 
with  a  backup  window  that  at 
times  lasted  18  hours  and  often 
caused  failed  tape  drives  and 
shutdowns. 

On  top  of  at  least  two  drive 
failures  each  month,  the  slug¬ 
gish  30-to-40MB/sec.  data 
transfer  speeds  guaranteed 
that  the  backup  window  for 
some  300  servers  would  con¬ 
tinue  to  grow. 

“The  backup  windows  just 
1  opt  growing  and  growing,” 
iid  Paul  Scheib,  director  of 
.  ations  and  chief  informa¬ 
tion  security  officer  at  Chil- 
1 /  on's  Hospital.  “There  were 
many  problems  at  night  that 


backups  were  being  missed.” 

Scheib  added  that  IT  per¬ 
sonnel  found  it  difficult  to  de¬ 
termine  the  cause  of  the  tape 
problems. 

To  fix  the  snags,  the  hospi¬ 
tal  first  tried  a  disk-to-disk 
backup  system  in  January  by 
launching  a  pilot  program  us¬ 
ing  virtual  tape  library  (VTL) 
technology  as  an  intermediary 
between  its  Fibre  Channel 
storage-area  network  (SAN) 
and  two  tape  libraries. 

Going  With  Plan  B 

Scheib  said  his  staff  quickly 
determined  that  the  pilot  was 
not  working  as  hoped,  forcing 
the  hospital  to  try  something 
else.  “We  had  a  lot  of  trouble 
getting  [the  pilot  system]  con¬ 
figured  correctly,”  he  said, 
noting  that  it  required  that 
the  Fibre  Channel  SAN  be 
integrated  with  the  VTM 
technology  from  Melville, 


N.Y.-based  FalconStor  Soft¬ 
ware  Inc. 

The  hospital  changed  paths 
in  June,  installing  a  disk-to- 
disk  backup  system  using 
DD460  disk  arrays  from  Data 
Domain  Inc.  in  Palo  Alto, 

Calif.  The  new  backup  system 
runs  on  an  Ethernet  network 
that  doesn’t  include  the  Fibre 
Channel  SAN. 

The  DD460  arrays  cost 
about  $75,000  apiece.  Data 
Domain  said. 

Scheib  said  the  new  disk 
arrays  doubled  data  transfer 
rates,  cutting  three  hours  from 
the  hospital’s  daily  backup 
window,  cutting  failures  in 
half  and  accelerating  restores 
from  hours  or  days  to  minutes. 

The  disk-based  backup 
technology  lets  the  hospital 
keep  about  three  months  of 
backup  data  online,  nearly 
eliminating  off-site  tape  re¬ 
calls  for  data  restores,  Scheib 
said.  The  response  time  for 
urgent  restore  requests  has 
been  reduced  from  four  hours 
to  a  few  minutes,  and  the  new 
system  enabled  the  hospital  to 


HThe  backup 
window  just 
kept  growing  and 
growing.  There  were 
so  many  problems 
at  night  that  back¬ 
ups  were  being 
missed. 


PAUL  SCHEIB,  DIRECTOR  OF  OPERA¬ 
TIONS  AND  CHIEF  INFORMATION  SECU¬ 
RITY  OFFICER,  CHILDREN'S  HOSPITAL 

eliminate  one  of  its  Hewlett- 
Packard  Co.  tape  libraries, 
he  noted. 

Scheib  said  he  backs  up 
about  60TB  a  week  to  his 
three  DD460  disk  arrays  using 
Symantec  Corp.’s  Veritas  Net- 
Backup  4.5  software. 

So  far,  the  new  system  has 
worked  flawlessly,  he  said. 

Tony  Asaro,  an  analyst  at 
Enterprise  Strategy  Group  Inc. 
in  Milford,  Mass.,  said  he  was 
surprised  that  the  pilot  VTL 
system  didn’t  work  out  for  the 
hospital,  because  such  sys¬ 


tems  are  relatively  easy  to  in¬ 
stall  and  usually  run  well. 

Asaro  did  say  that  networks 
incorporating  Fibre  Channel 
SANs  can  be  harder  to  config¬ 
ure  and  that  VTL  technology 
can  be  more  difficult  to  use 
than  Ethernet-based  disk-to- 
disk  technologies. 

Overall,  disk-to-disk  tech¬ 
nology  is  not  without  its  draw¬ 
backs,  according  to  some  ana¬ 
lysts  and  users. 

Jerome  Wendt,  a  senior  in¬ 
formation  systems  analyst  at  a 
large  Midwest  data-processing 
firm,  has  experienced  prob¬ 
lems  integrating  some  tradi¬ 
tional  backup  software  with 
disk-to-disk  backup  technology. 

“I  know  there  are  issues 
with  [IBM’s]  Tivoli  Storage 
Manager,  where  it  doesn’t 
recognize  every  virtual  tape 
library  interface  presented  to 
it,”  Wendt  said. 

Scheib  said  that  he  hasn’t 
yet  run  into  any  issues  with 
his  Data  Domain  technology 
and  plans  on  further  reducing 
his  dependency  on  tape. 

O  57996 
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We’re  inspired  by  the  human  side  of  data.  Digital  photography  is  more  than  just  jpeg  files.  It’s  sharing  a  grin 
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with  Grandma.  It’s  sending  giggles  and  gurgles  to  aunts  and  uncles.  That’s  why  Hitachi  hard  disk  drives  are  ; 
the  industry  choice  for  digital  cameras,  and  proud  parents.  From  the  smallest  Microdrive  to  the  largest  SAM  M 
solution,  Data  Storage  from  Hitachi. 


hitachiyourdata.com 


HITACHI 

Inspire  the  Next 


Your  data 


is  7  pounds, 


3  ounces. 
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Mercury  Execs 
Resign  in  Scandal 

Three  Mercury  Interactive  Corp. 
executives  -  CEO  Amnon  Landan, 
Chief  Financial  Officer  Douglas 
Smith  and  General  Counsel  Susan 
Skaer  -  have  resigned  after  an 
internal  probe  into  stock-option 
grants  resulted  in  a  scathing  re¬ 
port  on  their  accounting  over¬ 
sight.  President  and  Chief  Operat¬ 
ing  Officer  Tony  Zingale  was 
named  CEO,  replacing  Landan, 
who  joined  the  firm  in  1989  and 
became  CEO  in  1997. 


Nortel  Blames  Q3 
Loss  on  Penalty . . . 

Nortel  Networks  Corp.,  citing 
restructuring  costs  and  a  penalty 
stemming  from  a  refiling  of  its  tax 
returns,  reported  a  loss  for  its 
latest  fiscal  period. 


NORTEL  BY  THE  NUMBERS 

REVENUE 

PROFIT/LOSS 

Q3’05 

S2.7B 

(S105M) 

Q3’04 

32.2B 

($259M) 

. . .  As  New  CEO, 
Motorola  Settle 

New  Nortel  CEO  Mike  Zafirovski 
has  agreed  to  repay  $11.5  million 
of  separation  money  to  former 
employer  Motorola  Inc.  to  settle  a 
lawsuit  filed  last  month  after  Nor¬ 
tel  announced  his  hiring.  Nortel 
will  reimburse  Zafirovski  for  the 
payment.  He  also  agreed  not  to 
recruit  Motorola  employees. 
Motorola  had  sought  to  prevent 
Zafirovski  from  working  at  Nortel 
for  two  years  and  block  him  from 
hiring  its  employees. 

Investors  Sell 
Agilent  Business 

Chip  developer  PMC-Sierra  Inc. 
has  agreed  to  buy  the  storage 
semiconductor  business  formerly 
owned  by  Agilent  Technologies 
Inc.  for  about  $425  million.  PMC- 
Sterra  is  acquiring  the  business 
from  investment  firms  Kohlberg 
avis  Roberts  &  Co.  and  Silver 
Lake  Partners,  which  bought  Agi¬ 
lent  s  chip  business  in  August. 


Microsoft  CRM  Upgrade 
To  Ship  Ahead  of  Schedule 


Users  hope  new 
product  addresses 
vl.2  shortcomings 

BY  MARC  L.  SONGINI 

ICROSOFT  CORP. 
last  week  said  its 
long-awaited 
CRM  3.0  upgrade 
will  ship  early  next  month, 
weeks  earlier  than  planned. 
The  product  was  originally 
slated  to  ship  during  the  first 
quarter  of  2006. 

Microsoft  said  the  release 
adds  a  number  of  features  to 
its  predecessor,  Version  1.2, 
including  the  ability  to  be  cus¬ 
tomized  without  extensive 
programming  and  stronger  in¬ 
tegration  with  the  Outlook 
personal  information  manager. 

In  July,  the  company  had  dis¬ 
closed  that  the  hosted  CRM  3.0 
version  would  be  sold  using  a 
subscription-based  pricing  for¬ 
mat,  which  potentially  mini¬ 
mizes  the  risks  in  deploying 


CRM,  according  to  Microsoft. 

Users  interviewed  last  week 
said  they  hope  the  new  release 
can  address  the  shortcomings 
of  Version  1.2. 

Michael  Kruger,  information 
systems  manager  at  Designer 
Doors  Inc.  in  River  Falls,  Wis., 
said  he  plans  to  give  CRM  3.0 
“a  long  and  critical  evaluation” 
in  hopes  that  it  corrects  some 
of  the  deficiencies  in  Version 
1.2.  Designer  Doors  currently 
runs  CRM  1.2  for  limited  func¬ 
tions  to  support  customer  ser¬ 
vice  operations,  he  said. 

Kruger  said  the  evaluation 
process  will  begin  next  month 
and  will  likely  last  at  least 
three  months.  “We  are  hoping 
to  get  from  3.0  what  was 
promised  with  1.0  —  a  collabo¬ 
rative  sales  tool  that  ties  to¬ 
gether  our  sales  force  with  our 
customer  service  and  allows 
all  customer  information  to 
reside  in  one  searchable  loca¬ 
tion,”  he  said. 

Because  of  glitches  in  syn- 


AT  A  GLANCE 


Microsoft  CRM  3.0 

•  Follow-on  to  CRM  1.2 

*To  be  available  as  a  service 

via  subscription 

Tight  integration  with  Office 

«  Customizable  without 

recoding 

®  Ships  in  early  December 

chronizing  data  in  mobile  sys¬ 
tems  in  CRM  1.0  and  1.2,  De¬ 
signer  Doors  removed  the  ap¬ 
plication  from  the  desktops  of 
its  sales  force.  Those  workers 
now  use  Outlook  to  support 
the  sales  process. 

Bernard  McMahon,  chair¬ 
man  of  Sheffield,  England- 
based  venture  capital  and 
business  services  provider 
Just  Good  Business,  said  his 
company  uses  Microsoft’s 
CRM  software  both  internally 
and  to  assist  clients. 


Microsoft  Exec  Weighs  In  on  CRM  3.0 


Brad  Wilson,  general  manager 
of  Microsoft’s  CRM  unit,  talked  to 
Computerworld’ s  Marc  L.  Songini 
about  the  release  of  the  compa¬ 
ny’s  long-awaited  CRM  3.0  soft¬ 
ware,  which  it  said  last  week  will 
ship  in  early  December, 
a  few  months  earlier  than 
expected.  Wilson  also 
explained  why  Microsoft 
jumped  from  Version  1.2 
to  3.0,  and  he  provided 
some  details  on  the  size 
of  the  company’s  CRM 
business. 

Why  did  you  push  up 
shipments  of  CRM  3.0  from 
early  next  year  to  early  next 
month?  We  had  said  we’d  finish 
sometime  in  the  first  quarter  of 
2006.  We  finished  coding  back 
in  May,  and  we  just  finished  test¬ 
ing  and  everything  else  [last] 
Monday. 


Microsoft’s  CRM  software  pro¬ 
ceeded  from  Version  1.2  to 
3.0.  What  happened  to  Version 
2.0?  We  had  initially  planned  to 
release  2.0  in  the  spring  of  this 
year.  But  [our]  partners  and  cus¬ 
tomers  said,  “This  is  a  good 
release,  but  it  could  be  a 
game-changing  release  if 
you  went  back  and  did 
some  additional  work."  We 
decided  to  put  some  more 
time  in  the  development 
cycle  and  add  some  cus¬ 
tomer  platform  flexibility  to 
make  it  easier  to  develop 
customized  and  vertical  applica¬ 
tions  around  CRM. 

What  are  some  of  the  features 
added  after  deciding  to  cancel 
Version  2.0?  [Version  3.0]  has 
the  ability  to  add  new  objects 
with  no  coding,  and  it’s  fully 
upgradable  and  portable. 


How  did  you  accomplish  this? 

Microsoft  CRM  is  a  very  modern 
application,  built  in  the  last  four 
to  five  years  with  a  Web  services 
architecture.  You  can  automati¬ 
cally  generate  a  new  object  and 
make  that  object  live  and  work  in 
the  system.  Before,  it  would  have 
required  a  lot  more  coding  to  cre¬ 
ate  customer  objects. 

How  big  is  Microsoft’s  CRM 
business?  We  grew  100%  last 
year  and  [foresee]  a  fast  growth 
rate  going  forward.  We  have  five 
and  a  half  thousand  customers 
now,  with  150,000  [end]  users. 

How  does  the  activity  in  the 
CRM  business  -  Oracle’s  move 
to  buy  Siebel  and  sell  its  On- 
Demand  offering,  and  the  con¬ 
tinued  growth  of  companies 
like  Salesforce.com  -  affect 
Microsoft’s  hosted  CRM 
plans?  It’s  not  really  affecting  us. 
For  hosting,  we’re  bringing  in  sub- 


“We’ll  be  using  the  new  ver¬ 
sion  as  soon  as  possible.  I’m 
already  recommending  it  to  all 
the  companies  we  work  with,” 
McMahon  said  via  e-mail. 

Darryl  Nitke,  CIO  at  Cosa 
Instrument  Corp.,  also  plans 
to  move  to  3.0  as  soon  as  pos¬ 
sible  to  take  advantage  of  its 
integration  with  Outlook.  His 
Yaphank,  N.Y. -based  company, 
which  distributes  sensors,  me¬ 
ters  and  industrial  controls, 
runs  CRM  1.2. 

Nitke  said  he  isn’t  interested 
in  the  subscription  licensing 
changes  from  Microsoft  be¬ 
cause  “the  hosted  model 
wasn’t  that  great  for  us.”  Cosa 
moved  from  a  hosted  Sales- 
force.com  Inc.  CRM  system  to 
the  Microsoft  software  be¬ 
cause  the  hosted  system 
lacked  integration  with  Cosa’s 
accounting  and  e-mail  applica¬ 
tions  and  had  limited  report¬ 
ing  and  customization  capabil¬ 
ities,  Nitke  said. 

Liz  Herbert,  an  analyst  at 
Forrester  Research  Inc.,  said 
CRM  3.0  includes  significant 
enhancements,  including  new 
or  improved  marketing  and 
customer  service  capabilities 
and  the  ability  to  create  role- 
based  user  interfaces.  ©  58000 


scription-based  pricing  through 
a  partner  network.  Previously, 
somebody  had  to  buy  the  license 
-  either  the  partner  or  customer. 

What  type  of  company  is 
Microsoft  targeting  with  CRM 
3.0?  We  are  selling  from  the 
smallest  to  the  largest,  bar  none. 
For  small  businesses,  we’re  re¬ 
leasing  a  small-business  edition 
prepackaged  for  the  Small  Busi¬ 
ness  Server.  Our  professional 
edition  can  fit  with  small  busi¬ 
nesses  that  have  more  complexi¬ 
ty,  as  well  as  midsize  and  enter¬ 
prise-size  companies. 

How  does  CRM  3.0  work  with 
Outlook?  We’re  going  way  be¬ 
yond  Outlook  integration.  We're 
offering  a  native  Outlook  experi¬ 
ence,  and  many  people  will  have 
no  idea  where  Outlook  stops  and 
CRM  starts.  Expect  us  to  integrate 
closely  all  the  [business]  applica¬ 
tions  overtime. 


ROI 

See  beyond  compliance  as  a  burden, 
a  diversion  of  capital,  a  drain  on  your 
productive  assets.  How  you  respond  to 
regulation  can  actually  enhance  your 
business  processes  and  IT  operations. 
With  IT  management  software  from 
CA,  you  automate  controls  over  business 
process  and  policy.  Enhance  the  flow  and 
security  of  information.  And  sustain 
productivity  of  your  systems  and  people 
at  higher  levels.  Over  95  percent  of  the 
Global  1000  rely  on  CA  software. 

Learn  what  the  return  on  compliance 
can  amount  to  for  your  business  at 
ca.com/compliance.  Or  call 
1-800-225-5224,  promo  code  1725. 
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Define  Your  Open  Enterprise.™ 


What  does  Open  mean  to  you?  Community?  Security? 
Risk?  Reward?  Can  it  leverage  legacy  systems? 
Consolidate  and  simplify?  Do  you  believe  in  its  power 


and  potential? 

Introducing  Novell®  software  for  the  open  enterprise 
—  the  only  software  that  makes  Open  work  for  you. 
From  desktop  and  data  center  to  identity  manage¬ 
ment,  resource  management  and  collaboration,  our 
flexible  combination  of  open  source  and  commercial 
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software  delivers  more  than  you  ever  imagined.  The 
power  to  automate  IT  asset  management.  Freedom 
from  single  vendor  lock-in.  Security  that  keeps  the 
right  information  safe  and  the  right  people  informed. 
And  the  ability  to  connect  people  to  performance  and 
business  to  possibilities.  So  you  can  build  an  open 
enterprise  that  makes  sense  for  you  —  and  your 
future.  This  is  Novell  software  for  the  open  enterprise. 
The  Open  you’ve  wanted  all  along. 
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Telef6nica  to  Buy  Mobile 
Networks  Operator  02 

MADRID 

Telefonica  sa  last  week  said  it 
has  agreed  to  pay  £17.7  billion 
($31.4  billion)  for  02  PLC,  which 
owns  mobile  network  operators  in  the 
U.K.,  Germany  and  Ireland  as  well  as 
on  the  Isle  of  Man. 

The  deal  ends  speculation  about  a 
possible  sale  of  Slough,  England-based 
02,  which  has  been  courted  by  several 
mobile  services  providers,  including 
Koninklijke  KPN  NV  in  the  Hague  and 
Deutsche  Telekom  AG  in  Bonn.  Both 
of  those  companies  declined  to  com¬ 
ment  on  whether  they  will  make  coun¬ 
teroffers  for  02,  which  was  spun  out  of 
BT  Group  PLC  in  2001. 

In  a  conference  call, 

Telefonica  Chairman 
Cesar  Alierta  said  that  if 
the  purchase  of  02  goes 
through,  the  Madrid- 
based  telecommunica¬ 
tions  company  has  no 
plans  to  make  additional 
major  acquisitions  in 
Europe. 

Telefonica  said  that  it 
expects  to  complete  the 
acquisition  in  January 


and  that  02  will  retain  its  existing 
brand  name  and  continue  to  be  based 
in  the  U.K. 

■  JOHN  BLAU,  IDG  NEWS  SERVICE 


GLOBAL  FACT 


Number  of  home  and 
business  subscribers  to 
broadband  services  in 
the  European  Union’s 
member  countries. 

Source:  Point  Topic  Ltd., 
London 


Sualcomm  Disputes 
nfair  Licensing  Claims 

BRUSSELS 

Qualcomm  xnc.,  a  San  Diego- 
based  developer  of  chips  and 
software  for  mobile  communica¬ 
tions,  is  challenging  charges  of  unfair 
patent  licensing  practices  that  were 
filed  in  Europe  late  last  month  by  a 
group  of  six  mobile  vendors. 

In  a  statement  issued  Oct.  28,  Qual¬ 
comm  called  the  allegations  “factually 
inaccurate  and  legally  meritless”  and 
vowed  to  vigorously  defend  itself.  The 
company  also  contended 
that  the  complainants  ap¬ 
pear  to  be  seeking  help 
from  European  officials  in 
renegotiating  the  license 
fees  for  its  patents. 

Nokia  Corp.,  LM  Erics¬ 
son  Telephone  Co.,  NEC 
Corp.  and  Texas  Instru¬ 
ments  Inc.  are  among  the 
vendors  that  said  they  had 
filed  complaints  with  the 
European  Commission 


charging  Qualcomm  with  anticompeti¬ 
tive  behavior. 

The  complaints  allege  that  Qual¬ 
comm  has  failed  to  adhere  to  agree¬ 
ments  the  company  made  when  it  con¬ 
tributed  patents  to  the  Wideband  Code 
Division  Multiple  Access  standard  for 
3G  mobile  networks. 

■  DAN  NYSTEDT,  IDG  NEWS  SERVICE 


Chinese  Bank  Caps 
Online  Transactions 

BEIJING 

THE  PEOPLE’S  BANK  OF  CHINA, 

which  sets  that  country’s  mone¬ 
tary  policy  and  regulates  parts  of 
its  banking  industry,  has  issued  a  set  of 
guidelines  capping  the  amount  that  in¬ 
dividuals  can  spend  online  at  1,000 
renminbi  ($123.53)  per  transaction. 

The  document,  called  “Guidelines 
for  Electronic  Payment  (No.  1),”  also 
limits  the  total  amount  of  electronic 
payments  that  Chinese  residents  can 
make  via  the  Internet  and  mobile 
phones  on  a  daily  basis  to  5,000  ren¬ 
minbi  ($618.62). 

However,  transactions  that  require 
the  use  of  digital  signatures  and  certifi¬ 
cates  to  authenticate  the  identities  of 
buyers  are  exempt  from  the  limits.  The 
central  bank  said  the  new  rules  are  de¬ 
signed  to  reduce  the  possibility  of  on¬ 
line  fraud.  ©  57952 
■  SUMNER  LEMON,  IDG  NEWS  SERVICE 
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Briefly  Noted 

Vodafone  Group  PLC  in  Newbury, 
England,  has  agreed  to  buy  a  10% 
stake  in  Bharti  Tele-Ventures  Ltd.  in 
New  Delhi  for  66.56  billion  rupees 
($1.48  billion).  Vodafone  said  that 
Bharti  has  14.1  million  mobile  cus¬ 
tomers  and  that  its  fixed-line  user 
base  grew  by  39%  from  April  to 
September. 

■  NANCY  GOHRING,  IDG  NEWS  SERVICE 


Lenovo  Group  Ltd.,  citing  growth  in 
Asian  markets,  said  its  second- 
quarter  profits  totaled  HKS354  mil¬ 
lion  ($43.8  million),  topping  a  con¬ 
sensus  forecast  of  HK$300  million 
($37.1  million)  issued  by  Thomson 
One  Analytics.  Second-quarter 
revenue  totaled  HK$28.5  billion 
($3.5  billion).  The  PC  maker  said 
that  35.8%  of  its  sales  were  in 
Hong  Kong,  Taiwan  and  China. 

■  SUMNER  LEMON,  IDG  NEWS  SERVICE 


The  Tokyo  Stock  Exchange  was 

forced  to  halt  trading  last  Tuesday 
as  a  result  of  a  system  glitch.  The 
problem  was  discovered  before  the 
market’s  9  a.m.  opening,  which 
was  delayed  by  more  than  four 
hours.  Reports  blamed  the  problem 
on  a  software  error  related  to  an 
October  trading  system  upgrade. 

■  MARTYN  WILLIAMS,  IDG  NEWS  SERVICE 


Sun  Taps  Into  StorageTek’s 
Portfolio  for  1TB  Tape  Drive 


BY  LUCAS  MEAR1AN 

Sun  Microsystems  Inc.  last 
week  brought  out  the  first 
fruit  of  its  recent  acquisition 
of  Storage  Technology  Corp. 

—  a  high-end,  3.5-in.  tape 
drive  that  can  hold  up  to  1TB 
of  compressed  data. 

The  new  T10000  tape  drive 
has  a  throughput  rate  of 
120MB/sec.  —  four  times  that 
of  its  predecessor,  the  9940B 
model  —  and  can  encrypt  data 
at  the  drive  level.  It  has  Fibre 
Channel  and  Ficon  dual-port 
connectivity,  Sun  said. 

Charles  Curran,  a  storage 
consultant  at  the  European 
Organization  for  Nuclear 
Research,  known  as  CERN, 
said  he  plans  to  test  the 
T10000  tape  drives  next  year 


alongside  IBM’s  competitive 
TS1120  1TB  product,  which 
started  shipping  late  last 
month.  His  organization,  which 
runs  a  particle  physics  research 
center  in  Geneva,  is  looking  to 
restock  its  storage  farm. 

Curran  expects  that  the  re¬ 
search  center  will  have  to  buy 
at  least  200  tape  drives  to  back 
up  a  mind-blowing  15  peta¬ 
bytes  (15,000TB)  of  data  annu¬ 
ally  related  to  particle  acceler¬ 
ator  experiments.  “The  bigger 
the  cartridge,  the  better,”  said 
Curran,  whose  operation  uses 
a  StorageTek  8L8500  modular 
tape  library  system.  Curran 
said  Sun  has  a  slight  through¬ 
put  advantage  over  IBM  of 
120MB/sec.  vs.  lOOMB/sec. 

He  said  the  TIOOOO’s  ability 


to  encrypt  data  isn’t  important 
at  his  site,  since  the  lab’s  data 
will  be  a  series  of  seemingly 
random  numbers  collected 
from  experiments  in  which 
atoms  are  accelerated  to  ve¬ 
locities  approaching  the  speed 
of  light  and  then  smashed 
against  other  atoms. 

The  accelerator  experi¬ 
ments  are  expected  to  go  live 
in  2007  once  the  new  storage 
arrays  are  up  and  running. 

Key  Issues 

CERN’s  StorageTek  library 
currently  houses  54  of  the 
older  9940B  tape  drives  with 
200GB  native  capacity  each. 
The  new  T10000  technology 
would  increase  throughput 
four  times  and  increase  capac¬ 
ity  two  and  a  half  times. 

While  added  capacity  and 
throughput  would  help  the 
research  center  lower  the 
overall  storage  footprint  in  a 


30-year-old  data  center  that 
has  little  room  to  grow,  it 
doesn’t  necessarily  address 
CERN’s  biggest  problem:  data 
restore  time. 

“We  have  to  try  and  read 


NEW  PRODUCT 


Sun  T10000 
Tape  Drive 

■  Offers  up  to  500GB 
uncompressed  capacity 

■  Supports  Fibre  Channel  and 
Ficon  dual-port  connectivity 


■  Has  120MB/sec.  throughput 


■  Supports  native  data 
encryption 


this  data  all  back  to  try  and 
analyze  this  in  later  years,” 
Curran  said.  “We  have  to  in¬ 
troduce  a  policy  into  our  soft¬ 
ware  whereby  we  just  don’t 
mount  the  tape  until  there  are 
many  requests  for  files  from  it. 
This  is  a  serious  change  for 
our  users.  They’ll  have  to  dis¬ 
cipline  themselves.” 

Scientists  at  CERN  intend 
to  read  back  all  15  petabytes 
of  data  up  to  twice  a  year  in 
order  to  perform  number¬ 
crunching  analysis.  Because 
of  that,  Curran  is  hoping 
to  achieve  high  read  through¬ 
put  rates  —  up  to  4GB/sec., 
which  the  new  drives  would 
be  able  to  achieve  working 
together. 

The  T10000,  which  has  a 
500GB  capacity,  is  expected  to 
be  available  this  month  start¬ 
ing  at  $37,000  for  the  Fibre 
Channel  model  and  $44,000 
for  the  Ficon  model.  ©  58002 
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Novell 

offs,  I’m  not  seeing  any  major 
changes  coming  [in  Novell’s 
software  offerings].  They’ve 
still  got  the  best  products  out 
there,”  said  Brad  Staupp,  a  se¬ 
nior  support  analyst  at  Johnson 
County  Community  College  in 
Overland  Park,  Kan.  Staupp 
said  he  has  beta-tested  Novell 
products  for  years  with  a  core 
group  of  developers  who  he 
hopes  will  remain  at  the  com¬ 
pany  after  the  cutbacks. 

Novell’s  continued  focus  on 
Linux  came  as  a  relief  to  some 
customers,  including  Steve 
Hartman,  director  of  central 
directory  services  for  the  state 


of  Nebraska.  The  state  uses 
22  clustered  servers  running 
SUSE  Linux  for  identity  man¬ 
agement  purposes,  and  Hart¬ 
man  said  that  officials  in  Ne¬ 
braska  are  “very  pleased”  with 
the  software’s  stability  and 
performance.  But,  he  added,  it 
would  help  Novell  “if  they  got 
a  little  more  Linux  market 
share.” 

Red  Hat  Linux  had  the  lion’s 
share  of  Linux  sales  last  year, 
controlling  nearly  two-thirds 
of  the  worldwide  market,  ac¬ 
cording  to  Credit  Suisse  First 
Boston.  SUSE  Linux,  in  com¬ 
parison,  had  a  market  share  of 
about  20%,  the  New  York- 
based  firm  said. 

Novell  CEO  Jack  Messman 
had  said  as  far  back  as  August 


that  cost  reductions  were  in 
the  works,  after  the  company 
reported  year-over-year  de¬ 
clines  in  both  revenue  and 
profits  for  its  third  quarter. 
The  layoffs,  which  are  due  to 
be  completed  by  the  end  of 
January,  will  reduce  Novell’s 
5,800-person  workforce  by 
more  than  10%.  The  move  is 
expected  to  reduce  annual  ex¬ 
penses  by  over  $110  million. 

The  cuts  are  part  of  a  wider 
restructuring  designed  to  fo¬ 
cus  Novell’s  product  develop¬ 
ment  and  consulting  resources 
on  areas  such  as  Linux  and 
open-source  technology,  as 
well  as  identity  and  resource 
management  software. 

Also  last  week,  Novell 
named  Ron  Hovsepian  presi- 


Continued  from  page  1 

Security 

Newton,  Mass.,  said  a  survey 
of  71  retailers  conducted  by 
the  firm  last  summer  showed 
that  companies  are  increasing¬ 
ly  associating  demographic  in¬ 
formation  and  transaction-lev¬ 
el  data  with  customer  profiles. 

Kilcourse  said  that  while 
many  retailers  have  assigned 
responsibility  for  ensuring  the 
security  and  integrity  of  that 
data,  the  information  often 
isn’t  encrypted,  and  queries 
aren’t  well  controlled.  Similar¬ 
ly,  companies  aren’t  always 
capturing  forensic  data  about 
the  creation  of  customer  infor¬ 
mation  and  its  retrieval  by  end 
users,  added  Kilcourse,  whose 
firm  organized  last  week’s  Re¬ 
tail  Data  Security  Forum. 

Demand  for  ROI 

Within  information  security 
organizations,  there’s  a  broad 
understanding  of  what  needs 
to  be  done  to  fix  such  issues, 
said  the  IT  security  director  at 
a  major  franchise  chain  based 
in  the  Midwest. 

“The  problem  is  the  execu¬ 
tive  sponsorship,”  said  the  se¬ 
curity  director,  who  requested 
anonymity.  Although  the  se¬ 
ries  of  high-profile  data  com¬ 
promises  that  have  come  to 
light  this  year  have  raised 
overall  awareness  of  the  stakes 
Involved,  there  still  is  an  un- 


Retail  Data 


Of  71  retailers  surveyed  by  Retail 
Systems  Alert  Group  last  summer: 

ABOUT  60%  said  they  are 
collecting  and  using  consumer- 
specific  data. 

ABOUT  50%  said  they  have 
linked  point-of-sale  transaction 
data  to  customer  profiles. 

ABOUT  50%  have  assigned  re¬ 
sponsibility  for  customer  data  to 
a  security  program  coordinator. 

LESS  THAN  50%  have  a  formal 
incident  response  plan  for  con¬ 
sumer  data  security  breaches. 

willingness  to  invest  in  securi¬ 
ty  projects  “without  a  clear, 
demonstrable  ROI,”  he  said. 

Even  so,  retailers  overall 
have  done  a  relatively  decent 
job  of  protecting  consumer 
data,  said  Bob  Belair,  a  partner 
at  Washington-based  law  firm 
Oldaker,  Biden  &  Belair  LLR 
Going  forward,  the  key  is  for 
companies  to  be  able  to  prove 
that  they  have  invested  an  ap¬ 
propriate  amount  of  time  and 
resources  in  securing  their 
data,  he  said. 

That  means  having  a  formal 
information  security  plan 
spelling  out  protections  that 
are  commensurate  with  the 
sensitivity  of  the  data  at  risk, 
according  to  Belair.  He  ad¬ 
vised  that  such  a  plan  also  has 
to  be  dynamic  so  companies 
can  respond  to  changing  secu¬ 


rity  threats.  In  addition,  it 
should  include  processes  for 
periodic  security  reviews  and 
audits,  and  for  training  work¬ 
ers  who  handle  consumer 
data,  he  said. 

“If  you  do  all  these  things 
and  a  hacker  still  breaks  in, 
chances  are  you  aren’t  liable, 
because  you’ve  acted  in  a  rea¬ 
sonable  manner  that  met  the 
relevant  metrics,”  Belair  said. 

The  director  of  information 
security  at  a  California-based 
specialty  retailer  with  about 
400  stores  said  that  distin¬ 
guishing  between  sensitive  in¬ 
formation  that’s  covered  by 
regulatory  requirements  and 
confidential  data,  such  as  infor¬ 
mation  about  intellectual  prop¬ 
erty,  is  critical  to  the  process  of 
identifying  the  key  data  assets 
that  need  to  be  protected. 

The  security  director,  who 
asked  not  to  be  identified,  said 
his  company  is  working  to  en¬ 
crypt  all  of  the  regulated  data 
on  its  networks  via  a  system 
that’s  based  on  public-key  in¬ 
frastructure  technology. 

Michele  DeMaree,  president 
of  DeMaree  Consulting  Inc.  in 
Colorado  Springs,  said  it’s  also 
important  to  form  cross-func¬ 
tional  teams,  develop  a  proc¬ 
ess  for  assessing  risks  by  mea¬ 
suring  the  frequency  of  policy 
violations  against  customer 
data  and  other  information, 
and  educate  business  man¬ 
agers  about  the  risks  to  their 
data.  ©  58004 


dent  and  chief  operating  offi¬ 
cer  and  gave  him  direct  re¬ 
sponsibility  for  product  devel¬ 
opment,  marketing,  sales  and 
services.  Hovsepian,  44,  is  a 
former  IBM  executive  who 
joined  Novell  in  June  2003.  He 
had  been  head  of  global  sales 
and  services  since  last  May. 
The  No.  2  slot  that  he  is  filling 
at  Novell  had  been  vacant 
since  former  Vice  Chairman 
Chris  Stone  left  the  company 
last  November. 

“Novell  did  need  to  do 


something  at  the  leadership 
level,”  said  Gartner  Inc.  ana¬ 
lyst  John  Enck.  “There’s  been 
quite  an  absence  since  Chris 
Stone  left.” 

“Hovsepian  has  overseen  re¬ 
sults  in  the  North  American 
sales  force,  and  with  Messman 
getting  older,  it  will  be  good  for 
Novell  to  have  somebody  as 
good  as  Hovsepian  in  place,” 
said  James  Taylor,  president  of 
The  East  Cobb  Group  Inc.,  a 
Marietta,  Ga.-based  integrator 
of  Novell  products.  ©  58027 


Open-source  Use  Is  Slowing,  Exec  Says 


ALTHOUGH  NOVELL  views  Lin¬ 
ux  as  a  key  growth  business, 

Ron  Hovsepian,  the  company’s 
new  president  and  chief  operat¬ 
ing  officer,  last  week  acknowl¬ 
edged  that  the  adoption  of  open- 
source  technology  in  data  cen¬ 
ters  is  slowing  rather  than  accel¬ 
erating. 

“There’s  a  wait-and-see  atti¬ 
tude  from  customers,”  Hovsepi¬ 
an  said  during  a  speech  at  the 
Open  Source  Business  Confer¬ 
ence  in  Newton,  Mass.,  agreeing 
with  similar  comments 
from  industry  analysts. 

Hovsepian,  who 
spoke  before  Novell 
announced  its  layoff 
and  restructuring  plans, 
said  that  vendors  are 
holding  back  open- 
source  software  and 
need  to  package  it  bet¬ 
ter  and  provide  users 
with  migration  tools. 

“Right  now,  [a  com¬ 
pany’s  IT  department] 
has  to  be  the  systems  integrator 
and  is  responsible  for  articulat¬ 
ing  the  value  back  to  the  busi¬ 
ness,”  he  said.  “The  customer  is 
having  to  do  too  much.” 

Hovsepian  noted  that  Novell 
has  increased  the  number  of 
packaged  applications  supported 
by  SUSE  Linux  to  more  than 
1,000,  up  from  42  when  it  bought 
the  operating  system  in  January 
2004.  But  he  also  stressed  the 
importance  of  “driving  open- 
source  where  it  is  needed  and  not 
trying  to  force-fit  it”  into  user  sites. 

Rowdy  Van  Cleave,  vice  pres¬ 
ident  of  network  operations  at  a 
financial  services  firm  in  the  San 


Francisco  area,  said  his  compa¬ 
ny  is  testing  SUSE  Linux  to  see 
if  it  can  handle  myriad  financial 
applications.  With  so  many  cus¬ 
tom  applications  in  large  com¬ 
panies  like  his,  help  from  ven¬ 
dors  is  needed  to  make  a  shift 
to  Linux  feasible,  added  Van 
Cleave,  who  asked  that  his  em¬ 
ployer  not  be  identified. 

In  an  interview  after  his 
speech,  Hovsepian  said  Novell 
doesn't  plan  to  sell  off  either  its 
GroupWise  collaboration  software 
or  ZENworks  resource 
management  products. 

But  Gartner  analyst 
John  Enck  said  the 
move  to  focus  internal 
resources  on  a  smaller 
number  of  technologies 
raises  questions  about 
how  much  the  company 
will  invest  in  products 
such  as  GroupWise  and 
NetWare. 

Enck  said  Novell  offi¬ 
cials  told  him  last  week 
that  they  remain  committed  to 
NetWare,  which  has  long  been 
the  company’s  flagship  product. 
But  he  advised  NetWare  kernel 
users  to  be  prepared  to  move 
within  five  years  to  Open  Enter¬ 
prise  Server,  which  also  runs  the 
stack  of  NetWare  computing  ser¬ 
vices  on  Linux. 

According  to  Enck,  Novell  of¬ 
ficials  also  told  him  that  there 
will  be  at  least  two  more  ver¬ 
sions  of  GroupWise  and  that 
technical  support  will  continue 
on  the  collaboration  technology 
for  10  more  years. 

-  Matt  Hamblen,  with  China 
Martens  of  the  IDG  News  Service 


HOVSEPIAN 

says  Novell 
has  observed  a 
wait-and-see 
attitude  toward 
open-source. 
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Opium  Wars 


Talk  about  some  vivid  flashbacks. 

As  I  was  reading  this  week’s  “China 
Syndrome”  cover  story  on  the  global 
problem  of  counterfeit  hardware  and 
software  products,  I  was  transported 
back  a  decade  to  when  I  was  working  for  the  Hong 
Kong  edition  of  Computerworld.  On  a  July  after¬ 
noon  in  1995, 1  did  something  that,  in  hindsight, 
was  pretty  stupid. 


I  decided  to  do  a  photo¬ 
graphic  expose  on  the 
Golden  Arcade,  the  notori¬ 
ous  basement-level  maze 
of  shops  and  stalls  in  the 
Shamshuipo  district  of 
Hong  Kong  that  was  widely 
known  as  the  heart  of  the 
region’s  counterfeit  soft¬ 
ware  industry.  For  around 
$5  to  $10,  you  could  buy 
just  about  any  piece  of  soft¬ 
ware  imaginable,  from 
operating  systems  to  rela¬ 
tional  databases  to  video 


don  tennant  is  editor  in 
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games.  And  more  often  than  not,  the 
pirated  version  of  any  given  U.S.  soft¬ 
ware  product  was  available  in  the  ar¬ 
cade  before  the  legitimate  version  was 
officially  launched  in  Hong  Kong. 

Taking  photographs  in  the  Golden 
Arcade  was  risky.  There  were  signs 
posted  everywhere  showing  a  camera 
with  a  big  X  over  it,  with  written  warn¬ 
ings  that  photography  was  strictly  pro¬ 
hibited.  It  was  no  secret  that  Hong 
Kong’s  triads  —  organized  criminal  el¬ 
ements  —  were  heavily  involved  in  the 
piracy  trade,  so  the  signs  carried  some 
serious  clout. 

It  was  hardly  surprising,  then,  that  I 
raised  a  ruckus  when,  once  inside,  I  be¬ 
gan  snapping  photographs.  People  were 
shouting,  and  a  Westerner  who  was 
paying  for  his  illegal  wares  scowled  at 
me.  “That’ll  get  you  into  real  trouble,” 
he  said.  “Very  trouble,”  a  shopkeeper 
echoed  in  broken,  but  effective,  English. 
I  ignored  them,  took  a  few  more  pho¬ 
tographs  and  left  without  incident. 

My  aim  was  to  show  readers  around 
the  world,  in  a  way  that  words  really 
couldn’t,  how  brazen  and  institutional¬ 
ized  software  piracy  was  in  Hong 
Kong.  But  words  are  the  only  tool  I 


have  to  convey  why  that 
was  the  case. 

While  there  is  no  ex¬ 
cuse  for  criminal  activity, 
there  are  reasons  for  it, 
and  there  are  contributing 
factors.  One  of  the  factors 
you  don’t  hear  much  about 
is  that  the  big-name  U.S. 
software  makers  helped  to 
foster  a  predisposition  to 
software  piracy. 

For  years,  those  vendors 
relied  on  local  distribution 
partners  to  sell  their  prod¬ 
ucts  in  Hong  Kong,  China  and  else¬ 
where  in  Asia,  rather  than  investing  in 
those  markets  with  a  direct  presence. 
Since  the  distributors  typically  were 
grossly  ill-equipped  to  provide  decent 
technical  support,  users  tended  to  feel 
like  second-class  customers.  Paying 


full  price  for  legitimate  software  was 
considered  unfair  when  they  weren’t 
getting  the  support  benefits  that  their 
counterparts  in  the  West  enjoyed. 

Exacerbating  the  resentment  were 
the  heavy-handed  tactics  of  the 
Washington-based  Business  Software 
Alliance.  The  fact  that  the  BSA  con¬ 
ducted  raids  and  rewarded  informants 
to  nail  companies  that  were  using  ille¬ 
gal  software  didn’t  sit  well  with  many 
users.  After  all,  the  BSA  represented 
companies  that  were  seen  as  dragging 
their  feet  on  investing  in  local  support 
operations. 

But  most  damaging  of  all  was  the 
fact  that  U.S.  software  vendors  were 
considered  two-faced.  While  the  BSA 
was  conducting  its  raids,  senior  execu¬ 
tives  from  some  of  the  top  vendors 
would  openly  declare,  “If  the  Chinese 
are  going  to  pirate  software,  we  want  it 
to  be  ours.”  The  point  was  that  they 
wanted  their  software  to  be  so  en¬ 
trenched  in  the  market  that  being  a 
de  facto  standard  would  eventually 
yield  a  huge  payoff. 

What  they  didn’t  realize  was  that 
trying  to  get  the  Chinese  hooked  on 
their  software  that  way  was  a  little, 
shall  we  say,  insensitive.  Remember 
the  Opium  Wars?  They  do.  ©  57967 
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TflQT'Rt  NOT 
PRODUCT. 


ADMIT  IT:  The  IT  life 
isn’t  usually  a  lot  of 
fun  anymore. 

We  spend  our  days  slowing  down 
the  pace  of  change.  We  no  longer  up¬ 
grade  equipment  just  because  it’s  three 
years  old.  We  avoid  the  next  release. 
We  worry  about  money  all  the  time. 

Meanwhile,  our  colleagues  present 
us  with  the  usual  long  lists  of  requests 
—  but  not  a  single  exciting  project.  In¬ 
novation  appears  dead.  Caution  rules. 

If  you’re  looking  for  something  as 
big  and  challenging  as  when  you  in¬ 
stalled  your  ERP  package,  the  timing  is 
wrong.  But  if  you’re  looking  for  the  op¬ 
portunity  to  make  a  difference,  the 
timing  is  right. 

Here  are  two  ideas 
to  make  life  more  in¬ 
teresting. 

Infrastructure  re¬ 
platforming  is  be¬ 
coming  more  inter¬ 
esting.  One  of  my 
clients  is  seriously 
looking  at  buying  an¬ 
other  mainframe  to 
run  Linux  partitions 
to  replace  Unix 
servers  that  run  SAR 
Why?  Business  con¬ 
tinuity.  It  costs  this 
client  four  times  as 
much  to  have  its  dis¬ 
aster  recovery  ven¬ 
dor  provide  servers 
as  it  would  to  provide  mainframe  ca¬ 
pacity,  and  installing  another  main¬ 
frame  can  prevent  a  multimillion- 
dollar  data  center  upgrade  as  well. 

This  counterintuitive  move  (wasn’t 
the  mainframe  supposed  to  have  died 
by  now?)  also  allows  this  client  to 
break  the  back  of  its  prioritization 
process,  which  was  based  on  applica¬ 
tion  projects  automatically  outweigh¬ 
ing  infrastructure  moves.  Its  justifica¬ 
tion  was  simple:  “Not  only  can  we  save 
money  in  the  budget  and  increase  our 
flexibility  by  doing  this,  but  the  return 
on  investment  is  guaranteed  as  well. 
Sure,  we  may  offer  only  a  single-digit 
return  —  but  there’s  no  doubt  it  will  be 
delivered.”  This  company  now  assess¬ 
es  the  risk  associated  with  getting  a  re- 
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turn  —  and  the  infrastructure  area  is 
getting  a  lot  more  money  as  a  result. 

Increasing  utilization  of  existing 
applications  is  also  a  growing  trend. 
Vivaldi  Odyssey  and  Advisory  Service 
has  discovered  that  real  usage  is  often 
a  fraction  of  what  the  business  case  in¬ 
tended,  making  the  real  ROI  far  less 
than  expected.  Six  months  after  instal¬ 
lation,  it’s  not  uncommon  to  find  that 
only  15%  of  the  users  make  use  of  40% 
or  more  of  the  functions  installed,  with 
20%  still  using  less  than  5%  of  the  new 
capabilities.  Low-use  situations  can  see 
60%  or  more  of  the  users  not  use  the 
new  facility  at  all,  with  another  20% 
using  less  than  5%  of  its  capabilities. 

So  where’s  the  problem?  Was  the 
system  overdesigned?  Misdesigned? 

Is  it  an  issue  of  management  disci¬ 
pline  in  seeing  to  it  that  the  system 
gets  used?  Would  training  help?  Find¬ 
ing  and  solving  the  real  problem  will 
unlock  the  latent  value  in  what  has 
been  delivered.  When  the  solution  de¬ 
livered  just  doesn’t  solve  users’  prob¬ 
lems,  they  won’t  use  it.  I  recall  one 
case  where  a  major  system  was  intro¬ 
duced  that  just  didn’t  fit  the  way  work 
was  done.  Even  though  the  justifica¬ 
tion  was  staff  reduction  —  and  the  re¬ 
ductions  had  been  made  —  the  users 
found  a  way  to  avoid  the  new  system. 

What  ties  these  two  ideas  together 
is  adopting  a  more  businesslike  ap¬ 
proach.  Thinking  and  speaking  of  fi¬ 
nancial  risks  and  returns  or  acting  as 
business  consultants  opens  business 
leaders’  eyes  to  the  knowledge  and 
skills  IT  professionals  have.  Convince 
them  that  you  have  more  to  offer  than 
what  you  do  inside  IT,  and  the  interest¬ 
ing  work  will  begin  to  flow.  ©  57905 

DAVID  MOSCHELLA 

TT,  Dot-coms 
And  ‘Getting’ 
Business 

YOU  MAY  NOT  have  no¬ 
ticed  recent  stories  ex¬ 
plaining  why  German 
book  publishers  are  saying  no 
to  Google’s  —  and  previously  Ama- 
zon.com’s  —  requests  to  put  German- 
language  books  online.  But  while  it  s 
easy  to  dismiss  this  as  just  another 
publishing  industry  story,  there  are 
larger  lessons  that  continue  to  get 
too  little  emphasis. 


Ever  since  the  dot-com 
boom,  there  has  been  direct 
competition  between  pure- 
play  Internet  firms  and  es¬ 
tablished,  pre-Internet  com¬ 
panies.  Which  group  has  the 
advantage?  Should  the  two 
sides  try  to  coexist,  or 
someday  merge?  Which 
would  ultimately  prevail? 

Ten  years  into  the  debate, 
we  have  an  initial  answer  — 
the  newcomers  are  winning. 

Consider  the  sectors 
where  the  dot-coms  have 
triumphed,  at  least  in  con¬ 
sumer-oriented  businesses.  The  music 
industry  sued  and  dabbled  only  to 
have  iTunes  suddenly  sweep  past  the 
old-line  labels.  Citibank  experimented 
with  Internet  payment  systems  but 
was  consistently  outmaneuvered  by 
PayPal.  To  compete  with  Expedia  et  al., 
U.S.  airlines  invested  heavily  in  their 
own  travel  business,  Orbitz,  but  even¬ 
tually  sold  it  off  to  Cendant.  U.S.  book 
publishers  never  really  tried  to  com¬ 
pete  with  Amazon,  which  also  easily 
routed  Barnes  &  Noble.  No  established 
health  care  provider  has  really  chal¬ 
lenged  WebMD.  Google  and  Yahoo 
have  smashed  the  best  of  what  Disney, 
Time  Warner  and  others  had  to  offer. 

Of  course,  there  are  some  important 
examples  on  the  other  side.  The  gro¬ 


cery  industry  has  moved 
aggressively  into  online 
delivery,  and  now  Stop  & 
Shop  owns  Peapod.  Clearly, 
the  major  brokerage  firms 
haven’t  crumbled  in  the 
face  of  online  brokerages, 
and  the  Internet  has  made 
few  major  inroads  into  the 
insurance  industry.  Major 
League  Baseball  broadcasts 
its  games  directly  over  the 
Web.  But  these  successes 
pale  compared  with  the 
longer  list  of  losses. 

Many  of  these  defeats 
are  likely  to  have  long-term  conse¬ 
quences.  It’s  becoming  clear  that  if  es¬ 
tablished  players  can’t  extend  their 
success  to  the  Web,  their  pre-Web 
businesses  will  eventually  suffer.  Ap¬ 
ple’s  iTunes  is  already  getting  into  the 
talent  identification  and  promotion 
business,  threatening  the  very  life¬ 
blood  of  the  traditional  music  industry. 
The  Internet  is  destined  to  become  a 
vast  infrastructure  for  purchases,  mo¬ 
bile  payments,  gambling  transfers  and 
other  transactions  that  the  world’s 
banks  ignore  at  their  peril.  Similar 
risks  exist  in  many  of  the  industries 
cited  above. 

What’s  the  situation  in  your  busi¬ 
ness?  IT  professionals  that  really  care 
about  the  companies  they  work  for 


should  be  asking  themselves  questions 
such  as  the  following: 

■  Where  is  new  IT-based  value  being 
created  in  our  industry? 

■  What  is  our  company’s  share  of 
this  new  value? 

■  Is  this  share  rising  or  falling? 

■  If  it’s  falling,  what  can  we  do 
about  it? 

These  are  the  types  of  questions  that 
business  people  routinely  ask  them¬ 
selves  but  that  corporate  IT  people,  in 
my  experience,  only  rarely  ask.  The 
questions  aren’t  particularly  hard;  ball¬ 
park  estimates  will  generally  suffice. 

We’re  always  hearing  about  how  IT 
must  become  more  businesslike,  but 
usually  this  refers  to  working  better 
within  one’s  own  company.  Truly 
knowing  your  business,  however, 
means  understanding  the  use  of  IT  not 
just  inside  your  organization,  or  even 
by  your  major  competitors,  but  across 
your  company’s  entire  ecosystem. 

The  German  book  industry  may  or 
may  not  have  the  resolve  and  solidarity 
needed  to  fend  off  mighty  Google.  But 
at  least  it’s  asking  the  right  questions 
and  getting  itself  into  the  game.  Are 
you?  ©  57877 
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IT  Could  Transform  the  Power  Grid 


I  ENJOYED  Thomas  Hoffman’s  ar¬ 
ticle  on  modernizing  the  power 
grid  [“Healing  Power:  Electric  Grid, 
Repair  Thyself,"  QuickLink  55643], 
One  collection  of  activities  not  men¬ 
tioned  falls  under  the  banner  Grid- 
Wise.  It’s  a  vision  for  the  future 
electric  system  built  on  the  premise 
that  IT  will  profoundly  transform 
planning  and  operation  of  the  pow¬ 
er  grid,  just  as  it  has  changed  busi¬ 
ness,  education  and  entertainment. 

The  Department  of  Energy  has  a 
GridWise  program  within  its  Office 
of  Electricity  Delivery  and  Energy 
Reliability  that  focuses  on  advanced 
communications  and  control  for 
modernizing  the  electric  power  sys¬ 
tem.  The  DOE  also  has  a  memo  of 
understanding  with  an  industry  or¬ 
ganization,  the  GridWise  Alliance, 
that’s  advancing  a  vision  for  a  smart 
energy  system  and  developing  a 
path  for  its  implementation.  Also, 
part  of  the  DOE  GridWise  program 
supports  a  select  group  of  technol¬ 


ogy-oriented  professionals  from  the 
broad  stakeholder  community. 

The  GridWise  Architecture  Coun¬ 
cil,  created  following  the  major 
2003  Northeast  blackout  and  in  re¬ 
sponse  to  the  Department  of  Ener¬ 
gy’s  call  for  a  next-generation  elec¬ 
tric  system,  seeks  to  establish 
broad  industry  consensus  in  sup¬ 
port  of  the  technical  principles  that 
enable  the  interoperability  neces¬ 
sary  to  transform  electric  power  op¬ 
erations  into  a  system  that  inte¬ 
grates  markets  and  technology  to 
enhance  our  socioeconomic  well¬ 
being  and  security. 

To  achieve  this  vision,  the  13 
members  of  the  council  are  devel¬ 
oping  and  promoting  policies  and 
practices  for  intelligent  interactions 
and  interoperability  across  the  elec¬ 
tric  system.  With  these  “rules  of 
the  road"  clearly  defined,  it  will  be 
possible  to  explore  new  concepts 
that  allow  electric  devices  to  inter¬ 
act  and  adapt  as  full  participants  in 


a  more  efficient  and  secure  power 
system. 

Steve  Widergren 

Chief  engineer,  Pacific  North¬ 
west  National  Laboratory, 
operated  for  the  Department  of 
Energy  by  Battelle,  Richland, 
Wash.,  steve.widergren@pnl.gov 


Joining  the  Club 

IN  READING  THE  COLUMN  “Re¬ 
evaluating  Accountants”  [Quick- 
Link  56208],  I  was  struck  by  the 
point  that  accountants  feel  threat¬ 
ened  by  new  systems  that  change 
their  role.  Welcome  to  the  club,  bean 
counters!  ERR  systems  and  other  ini¬ 
tiatives  like  lean  manufacturing  have 
been  changing  roles  for  people  in 
manufacturing  and  other  disciplines 
for  years.  IT  has  been  changed,  too. 
When  PCs  with  spreadsheets  ar¬ 
rived,  we  had  concerns  that  users 
were  creating  and  managing  their 
own  information,  away  from  the 
mainframe  world.  But  no  enterprise 
exists  to  provide  people  with  jobs  in 


unchanging,  comfortable  roles.  An 
enterprise  has  a  mission  to  deliver 
goods  and/or  services  as  well  as  or 
better  than  its  competitors.  A  supe¬ 
rior  organization  pursues  process 
change  for  improved  productivity 
and  customer  satisfaction.  But  it 
also  recognizes  the  value  its  em¬ 
ployees  have  in  understanding  the 
business  and  finds  new  roles  for  the 
best  and  brightest. 

Maynard  Wiff 
Hudson  N.H. 
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Moving  Pictures 

Mobile  video  is  a  reality 
for  consumers,  especially 
in  Asia,  and  it  shows 
promise  as  a  business 
application  —  but  not  for 
the  near  future.  Page  28 


FUTURE  WATCH 

Can  You  Understand  Me  Now? 

Voice  applications  like  interactive 
voice  response  and  other  speech- 
recognition  technologies  are  finally 
ready  to  live  up  to  their  promise. 

Page  30 


SECURITY  MANAGER’S  JOURNAL 

How  to  Get  a  Job 
In  the  Infosec  Field 

C.J.  Kelly’s  readers  wrote  to  her  and 
wondered  where  the  IT  security  jobs 
are,  so  she  did  a  little  research  and 
tells  what  she  found.  Page  34 
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DIRTY  DATA 

BLIGHTS  THE 


crosoft  Access-based  effort:  that  sales  en¬ 
tities  all  over  the  world  would  enter  cus¬ 
tomer  names  and  addresses  in  the  same 
manner,  regardless  of  whether  they  oper¬ 
ated  in  the  Asia-Pacific  region,  Europe  or 
other  areas  in  which  Emerson  does  busi¬ 
ness.  Cultural  differences,  combined  with 
complications  caused  by  Emerson’s  con¬ 
tinuing  growth  through  acquisition,  re¬ 
sulted  in  numerous  ways  of  entering 
quote,  billing,  shipping  and  other  key  data. 

Emerson’s  problems  with  inaccurate 
data  are  typical  across  all  industries. 
Through  2007,  at  least  25%  of  critical  data 
within  Fortune  1,000  companies  will  con¬ 
tinue  to  be  inaccurate,  according  to  Gart¬ 
ner  Inc.  And  only  34%  of  executives  re¬ 
sponding  to  a  2004  Pricewaterhouse- 
Coopers  survey  said  they’re  very  confi¬ 
dent  in  the  quality  of  their  corporate  data. 

Although  many  businesses  tend  to 
think  that  data  quality  primarily  affects 


When  Nancy  Rybeck  was  hired  by  Emer¬ 
son  Process  Management  six  years  ago, 
she  was  charged  with  salvaging  a  data 
warehouse  that  had  been  built  to  help 
the  company  better  analyze  customer 
activity.  But  after  a  thorough  review, 
she  opted  to  scrap  it  and  start  over.  The 
warehouse,  it  seemed,  was 
loaded  with  redundant  and 
inaccurate  data. 

“The  biggest  reason  [the  ear¬ 
lier  effort]  had  failed  was  data 
quality,”  says  Rybeck,  data 
warehouse  architect  at  Austin- 
based  Emerson  Process  Man¬ 
agement,  a  global  supplier  of 
measurement,  analytical  and 
monitoring  instrumentation  and 
services.  One  major  contribu- 
7  tor  to  the  failure  was  an  as- 
-  sumption  made  by  the  group 
-  that  launched  the  initial  Mi- 


ANDREW  SKWISH 


A  PwC  survey  showed  no  significant  gain  in  the  confidence  that 
IT  executives  had  in  their  companies’  data  from  2001  to  2004. 
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customer-facing  initiatives,  the  impact 
can  be  more  profound  on  internal  opera¬ 
tions.  “CRM  initiatives  fail,  and  compa¬ 
nies  get  into  trouble  with  the  security 
and  privacy  of  customer  data,”  says 
Gartner  analyst  Ted  Friedman.  “But  the 
big  money  being  lost  [because  of  poor 
data  quality]  is  in  internal  operations.” 

Inaccurate  financial  reporting,  uncol¬ 
lected  receivables,  overpayments,  poor 
product  specifications,  excess  inventory 
—  the  problems  caused  by  inaccurate 
data  are  endless,  and  they  all  affect  the 
bottom  line. 

Meanwhile,  mounting  regulatory  com¬ 
pliance  requirements  dictate  increased 
data  vigilance.  “You  can  have  all  the  con¬ 
trols  in  place,  but  if  your  data’s  not  accu¬ 
rate,  your  CFO  will  be  signing  off  on  inac¬ 
curate  information,”  says  Robert  Lerner, 
an  analyst  at  Current  Analysis  Inc. 

Data  quality  initiatives  have  long  lan¬ 
guished  in  the  shadow  of  sexier  projects. 
But  thanks  to  failed  CRM  and  ERP  ef¬ 
forts,  compliance  violations,  costly  sup¬ 
ply  chain  inefficiencies  and  more,  that’s 
starting  to  change.  Investments  in  data 
quality  suites  are  growing  at  a  rate  be¬ 
tween  12%  and  15%  annually,  according 
to  Gartner,  and  the  market  is  starting  to 
consolidate  as  it  matures. 

Protect  Your  Source 

Tools  that  address  data  quality  fall  into 
a  variety  of  categories,  including  data 
profiling  software,  which  sifts  data 
fields  for  duplication,  missing  informa¬ 
tion  and  other  errors;  data  cleansing 
and  matching  tools,  which  parse  data 
into  discrete  elements,  clean  it,  stan¬ 
dardize  it  in  formats,  and  match  and 
merge  records;  data  enhancement  tools, 
which  enrich  data  by  incorporating,  for 
instance,  third-party  elements;  and  data 
monitoring  tools,  which  ensure  that 
data  maintains  a  preset  level  of  quality. 

Some  IT  groups  still  rely  on  extract, 
transform  and  load  functions  to  ready 
data  from  various  applications  for  stag¬ 
ing  in  warehouses,  but  experts  say  ETL’s 
effectiveness  is  only  as  good  as  the  data 
being  transformed. 

“ETL  isn’t  the  same  thing  as  data  quali¬ 
ty;  I  the  process]  may  have  nothing  to  do 
with  data  cleanup,”  says  Chad  Wright,  ap¬ 
plications  manager  for  business  intelli¬ 
gence  and  CRM  at  Tewksbury,  Mass.- 
based  Avid  Technology  Inc.  The  provider 
of  digital  media  creation  products  pur¬ 
chased  tools  from  Firstlogic  Inc.  in  2001 
as  part  of  an  effort  to  clean  and  match 
data  between  its  new  SAP  CRM  system 
and  its  legacy  Onyx  CRM  system.  (In 
September,  Pitney  Bowes  Inc.  announced 

■  in tendon  to  acquire  Firstlogic.) 

Avid  continues  to  use  Firstlogic  tools 
■ '  llidate  customer  master  data  from 


TECHNOLOGY 


companies  it  acquires  against  its  SAP 
masters  to  prevent  duplication.  It’s  also 
performing  some  data  quality  measures 
in  real  time;  The  IT  group  has  developed 
a  Web  service  that  takes  advantage  of 
Firstlogic’s  IQ8  service-oriented  archi¬ 
tecture  (SOA)  to  automatically  capture 
shipping  information  and  validate  it 
against  country-specific  postal  codes,  ac¬ 
cepting  or  correcting  it  at  the  point  of 
contact.  Avid  is  also  running  the  vendor’s 
Global  Data  Quality  Connector  for  SAP, 
which  allows  real-time  checks  in  the  SAP 
environment  during  order  processing. 

“We  saw  benefit  from  doing  real-time 
data  quality  functions,  cleaning  up  the 
thousands  of  marketing  leads  that  come 
into  our  systems  every  day,”  says  Wright. 

Emerson  has  adopted  data  quality 
tools  from  Landham,  Md.-based  Group  1 
Software  Inc.,  a  Pitney  Bowes  subsidiary, 
to  help  profile,  cleanse  and  merge 
records  for  its  data  warehouse.  Given 
Emerson’s  global  scope  and  acquisition 
strategy,  cleaning  data  manually  wasn’t 
an  option,  says  Rybeck. 

Emerson’s  data  warehouse  is  fed  by  nu¬ 
merous  source  systems  from  around  the 
world.  Contact  information  for  quoting, 
billing  and  shipping  is  linked  to  associat¬ 
ed  transactional  records.  Duplicate  rec¬ 
ords  are  then  eliminated,  and  the  data  is 
merged  using  Group  1  tools,  custom  cod¬ 
ing  and  manual  review  processes.  Ulti¬ 
mately,  says  Rybeck,  Emerson  wants  full 
use  of  its  contact  data  to  better  anticipate 


BURDENSOME  as 

compliance  mandates 
may  be,  they've  made 
the  business  case  for 
data  quality  tools  with¬ 
in  some  organizations. 

Matching  capabilities 
are  a  component  of  what 
data  quality  tools  offer,  and  they’re  particularly 
useful  when  businesses  need  to  ensure  that 
they’re  in  compliance  with,  say,  the  Treasury 
Department’s  Office  of  Foreign  Assets  Con¬ 
trol’s  (0FAC)  list  of  Specially  Designated  Na¬ 
tionals  (SDN),  a  list  of  terrorists,  drug  traffick¬ 
ers  and  similar  unsavories.  Financial  services 
and  insurance  firms  must  continually  check  to 
ensure  that  customers  or  potential  customers 
aren’t  on  the  list. 

And  these  suspect  lists  “are  a  mess,”  accord¬ 
ing  to  analyst  Robert  Lerner  at  Current  Analysis. 
There’s  no  schedule  for  their  release  because 
they’re  updated  as  needed,  and  they’re  primarily 
in  ASCII  format. 

American  Education  Services  (AES),  which 
manages  more  than  S43  billion  in  assets 
through  its  servicing,  guaranty  and  financial  aid 
processing  systems,  is  using  Pittsburgh-based 
innovative  Systems  Inc.'s  i/Lytics  Secure  to 


customer  needs  and  improve  its  service 
and  marketing. 

“The  plan  is  to  have  this  feedback  loop 
be  complete.  In  the  past,  we  may  have 
used  the  marketing  information  to  get 
some  business,  but  we’ve  never  followed 
through  to  see  what  the  profitability  was 
in  a  marketing  campaign,”  says  Rybeck. 

Keeping  It  Clean 

Since  adopting  data  quality  tools  from 
Billerica,  Mass.-based  Trillium  Software, 
printer  manufacturer  Oki  Printing  Solu¬ 
tions  has  been  able  to  improve  its  mar¬ 
keting  campaigns.  It  has  also  significantly 
reduced  fees  and  fines  in  its  distribution 
chain  associated  with  bad  contact  infor¬ 
mation,  says  senior  systems  analyst  Mag¬ 
gie  Dominguez.  Mount  Laurel,  N.J.-based 
Oki  started  using  Trillium  in  1999  to 
clean  data  it  was  moving  from  legacy  sys¬ 
tems  to  SAP  and  now  uses  it  for  handling 
consumer  and  end-user  contact  data. 

Dominguez  and  her  team  started 
building  a  data  warehouse  less  than  a 
year  ago  to  improve  the  company’s 
analysis  capabilities  for  functions  such 
as  sales  projections.  “We  wouldn’t  have 
survived  without  the  data  quality  tools,” 
she  says.  “We  would  have  ended  up  with 
huge  quantities  of  data  that  would  have 
been  very  hard  to  mine.” 

Although  businesses  would  like  to  ad¬ 
dress  their  data  quality  problems  once 
and  be  done,  maintaining  accurate  data  is 
an  intensive,  ongoing  effort.  A  master 


check  its  various  loan 
servicing  and  guaranty 
databases  against  the 
0FAC  list.  According  to 
Diane  Freundel,  assis¬ 
tant  vice  president  at 
the  Harrisburg,  Pa,- 
based  agency,  AES 
runs  the  program  every  time  it  runs  an  origina¬ 
tion  database  batch,  which  could  be  several 
times  daily,  as  well  as  at  preset  times  for  other 
databases. 

When  0FAC  releases  an  update  of  the  SDN 
list,  AES  receives  a  cleansed  version  from  In¬ 
novative  as  an  FTP  file.  If  the  system  finds  a 
suspicious  person,  execs  receive  an  e-mail  that 
directs  them  to  a  report.  “Otherwise  we’d  have 
to  manually  look  up  every  person  that  we’re 
originating  a  loan  for,"  says  Freundel. 

Though  i/Lytics  has  default  business  rules  for 
matching  criteria,  AES  opted  to  set  thresholds 
lower.  That  means  it  gets  a  higher  rate  of  false 
positives,  requiring  more  manual  rechecks.  The 
software  also  allows  the  company  to  put  people 
who’ve  passed  previous  checks  on  a  “safe  list” 
so  they  don’t  have  to  be  rechecked  unless  perti¬ 
nent  personal  data  or  the  list  changes. 

-KymGilhooly 


customer  file  may  be  completely  accurate 
on  Friday  evening  but  house  numerous 
inaccuracies  by  Monday  morning,  with¬ 
out  any  interference.  That’s  because  data 
decays  by  itself:  People  are  born  and  die, 
and  they  change  names  and  addresses; 
companies  go  out  of  business  or  get 
snapped  up.  Further,  there  are  many 
points  of  entry  to  enterprise  data  sources, 
and  data  is  continually  repurposed. 

Key  to  maintaining  data  cleanliness  is 
controlling  who  touches  it,  says  Jeffrey 
Monica,  manager  for  data  quality  at 
StorageTek,  a  subsidiary  of  Sun  Micro¬ 
systems  Inc.  StorageTek  has  been  using 
tools  from  DataFlux  Corp.,  a  SAS  Insti¬ 
tute  Inc.  subsidiary,  to  cleanse  data 
from  more  than  60  source  systems 
worldwide  for  a  customer  data  ware¬ 
house.  “We  want  to  give  people  the 
flexibility  to  use  [the  warehouse  and  as¬ 
sociated  marts],  but  we’ll  have  control 
over  the  quality  of  the  data  so  we  can 
say  we  have  a  single  version  of  the 
truth,”  Monica  says. 

StorageTek  uses  Informatica  Corp.’s 
ETL  tool  to  pull  data  from  specific 
fields  for  data  warehouse  loading.  It 
uses  DataFlux  tools  to  identify  the  most 
accurate  record  and  to  cleanse  and 
standardize  data.  Though  Monica  says 
StorageTek  still  has  significant  data 
duplication,  the  company  has  thus  far 
reduced  1  million  records  in  its  ware¬ 
house  to  around  200,000. 

StorageTek  began  the  warehouse  ef¬ 
fort  three  years  ago  but  didn’t  buy  data 
quality  tools  until  a  year  ago,  says  Mon¬ 
ica.  “The  good  news  is  we  recognized 
we  needed  them,  but  the  bad  news  is 
we  didn’t  do  it  on  Day  One,”  he  says. 

Others  are  recognizing  the  need  as 
well,  and  deployments  will  be  improved 
only  by  increased  integration  between 
data  quality  tools  and  enterprise  appli¬ 
cations,  support  for  Web  services 
through  SOA  approaches,  and  process¬ 
es  for  continuous  data  quality  monitor¬ 
ing,  say  experts. 

“If  you’re  processing  large  amounts 
of  data,  you  need  data  quality  tools  so 
you  can  do  standardization,  validation, 
cleansing  and  duplicate-checking,” 
says  Avid’s  Wright.  Then,  he  says,  you 
can  start  attacking  the  problem  at  the 
source,  ensuring  that  new  data  enter¬ 
ing  the  system  is  clean.  ©  57769 


Gilhooly  is  a  freelance  writer  in  Fal¬ 
mouth,  Maine.  You  can  reach  her  at 
kymg@maine.rr.com. 


CONSOLIDATION  TREND 

The  number  of  data  quality  vendors  is  dropping  as 
mergers  and  acquisitions  dominate  the  market: 
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Sony  recommends 
Windows®  XP  Professional. 


A  SINGLE  BUSINESS  NOTEBOOK  SERIES 
EQUIPPED  FOR  EXCEPTIONAL  PERFORMANCE, 
PRODUCTIVITY,  AND  FLEXIBILITY. 


Give  me  mobility.  Thin  and  light  form  factors 
Long  battery  life1 

I  want  flexibility.  14"  with  modular  bay 


15.4"  with  modular  bay 
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Optional  integrated  wireless  WAN3 
Optional  integrated  camera 

The  Sony®  VAIO®  Professional  BX 
Series  Notebook,  featuring  Intel® 
Centrino'”  Mobile  Technology  for 
exceptional  performance  and 
productivity.  Now  every  department, 
group,  and  individual  in  your 
organization  has  the  power  to 
handle  the  toughest  applications 
with  machines  that  offer  extended 
battery  life  and  sleek,  lightweight 
designs.  No  other  notebook  boasts 
as  many  features. 


Call  866-303-7669 
Visit  sony.com/bx2 


17"  with  modular  bay 


Biometric  fingerprint  sensor 


Trusted  Platform  Module 


Bluetooth®  Technology2 
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I  demand  security. 


I  can’t  live  without  connectivity. 
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Affordable,  reliable,  easy  to  manage:  eServer  xSeries  with  Intel®  Xeon™  Processors 


IBM  eServer  xSeries  226  Express 

An  entry-level  2-way  server  that 
offers  the  reliability  and 
performance  needed  for  day-to- 
day  computing.  Easy  to  set  up 
and  deploy,  with  access  to  all 
major  system  components. 

System  features 

Up  to  two  Intel®  Xeon™ 
Processors  3GHz/2MB 
Two-way  tower  with 
rack  capability 
Up  to  6  hot-swappable 
SCSI  hard  disk  drives 
Integrated  RAID  0,1 
Limited  warranty:  up  to  3 
years  on-site3 

From  $1,6394* 

(Other  configurations  as  low  as  $1,229) 

1BIV1  Financing  Advantage 

Only  $46  per  month6 


IBM  eServer  xSeries  346  Express 

Help  maximize  performance  and 
improve  availability  in  a  rack 
dense  environment  with 
Xtended  Design  Architecture:" 
Includes  Calibrated  Vectored 
Cooling,  an  IBM  innovation  that 
helps  increase  uptime. 

System  features 

Up  to  two  Intel®  Xeon™ 
Processors  3GHz/2MB 

Two-way  2U  rack  server 

Up  to  16GB  DDR2  memory 
using  8  DIMM  slots  with 
enhanced  memory 

Limited  warranty: 

3  years  on-site3 

From  $3,3154* 

(Other  configurations  as  low  as  $2,219) 

IBM  Financing  Advantage 

Only  $93  per  month5 


IBM  eServer  xSeries  260  Express 

IBM’s  newest  third-generation 
Enterprise  X-Architecture® 
server.  Designed  for  companies 
looking  for  database,  e-mail, 
Web/e-commerce  or  consolidated 
application  serving. 

System  features 

Up  to  four  64-bit  Intel®  Xeon™ 
Processors  MP,  up  to  3.66GHz 

Four-way  tower  or  7U  rack 
capability 

Up  to  3.6TB  hot-swappable 
SAS  (serial  attach  SCSI) 
hard  disk  storage 

Up  to  64GB  of  memory  with 
advanced  memory  protection 
Limited  warranty:  3  years  on-site3 

From  $5,3994* 

(Other  configurations  as  low  as  $4,599) 

IBM  Financing  Advantage 

Only  $151  per  month5 
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Flexible  and  easy  to  use 


IBM  eServer  BladeCenter  HS20  Express 

Offers  extreme  flexibility  and 
scalability,  plus  it  helps  to 
consolidate  and  simplify  your 
infrastructure.  Helps  reduce 
power  consumption  and  save 
valuable  floor  space. 


System  features 

Up  to  two  Intel®  Xeon™ 
Processors  3.20GHz/2MB 
Up  to  14  blades  per  chassis 
Supports  both  32- 

and  64-bit  applications  _ 
IBM  Director2 
Limited  warranty: 

3  years  on-site3 


From  $2,8994* 

(Other  configurations  as  low  as  $1,669) 

IBM  Financing  Advantage 

Only  $81  per  month5 


IBM  TotalStorage®  Simplify  storage  management  to  improve  productivity 


IBM  TotalStorage  DS300  Express 

This  entry-level,  cost-effective  iSCSI  host- 
attached  storage  system  utilizes  your  existing 
network  infrastructure  to  deliver  advanced 
functionality.  Provides  an  exceptional  SAN 
storage  solution  with  xSeries  servers  for 
e-mail/file/print. 


System  features 

3U  rack  mount  entry-level 
with  two  controllers 
Support  for  up  to  14 

Ultra320  SCSI  disk  drives 

From  $6,4554* 

(Other  configurations  as  low  as  $2,995) 


Starts  at  584GB  / 
scales  to  4.2TB6 

Limited  warranty:  1  year 
on-site3 


IBM  Financing  Advantage 

Only  $180  per  month5 


*AII  prices  are  IBM’s  estimated  retail  selling  prices  as  of  September  13, 2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are  subject  to 
availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  nol  offer  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  1.  IBM  Director  is  not  available  on  TotalStorage 
products.  2.  IBM  Director  must  be  installed.  Products  included  in  IBM  Express  Servers  and  Storage  may  also  be  purchased  separately.  3.  Telephone  support  may  be  subject  to  additional  charges.  For  on-siie  labor.  IBM  will 
attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  On-site  warranty  is  available  only  for  selected  components.  4.  Prices  subject  to  change  without  notice.  Starting  price  may  not  include  a  hard 
drive,  operating  system  or  other  features.  Contact  your  IBM  representative  or  IBM  Business  Partner  for  the  most  current  pricing  in  your  geography.  5.  IBM  Global  Financing  offerings  are  provided  through  IBM  Credit  LLC  in 


USED  TO  SAYING: 
UNDER  CONTROL.’’ 


IBM  Express  Servers  and  Storage  ™  for  mid-sized  business. 

Know  an  I.T.  person  who  doesn’t  like  to  hear  that  “everything’s  under  control"? 
We  don’t.  That’s  why  we  offer  an  innovative  management  tool  called  IBM 
Director  that  can  alert  your  I.T  people  to  potential  problems  up  to  48  hours  in 
advance ! 

And  our  Calibrated  Vectored  Cooling  on  select  xSeries*  servers  helps  cool  your 
systems  more  efficiently  Packing  more  servers  into  a  single  rack.  Helping  to 
save  space,  energy,  money. 

With  IBM  Express,  innovation  comes  standard.  That’s  true  for  servers,  storage 
and  printers.  Your  local  IBM  Business  Partner  can  tell  you  more.  And  remember, 
you  can  keep  your  technology  current  while  helping  to  reduce  costs  -  through 
IBM  Global  Financing. 

Excited?  No  need  to  control  yourself  Get  started  today. 


Save  time.  Save  costs.  Save  the  day!  (Optimize  your  I.  T.) 
ibm.com/systems/innovate1 
1  800-IBM-7777  mention  104CE04A 


IBM  TotalStorage  DS400  Express 

Exceptional  entry-level  solution  for  workgroup 
storage  needs.  With  advanced  functionality, 
the  DS400  supports  xSeries  servers  and 
utilizes  hot-swap  Ultra320  SCSI  drives  for 
high  reliability. 


System  features 

311  rack  mount  entry-level  with  up  to  Starts  at  584GB  /  scales  to  12TBf’ 
two  controllers 

2GB  Fibre  Channel  storage  systems  Limited  warranty:  1  year  on-site3 
area  network  (SAN)  _ 

From  $8,4954*  IBM  Financing  Advantage 

(Other  configurations  as  low  as  $4,995)  Only  $237  per  month 


other  actors,  l  ease  offer  pmvittec hs  bused  on  a  FMV ™ ^°^cen?pr  TsprV'^  TotalStoraqe  IBM  Express  Servers  and  Storage,  Enterprise  X-Architecture  and  Mended  Design  Architecture  are  trademarks  or  registered 

mskfe,  the  Intel  Inside  iogo'and  Intel  Xeon  are  trademarks  or  registered  trademarks  ot  Intel  Corporation  or  its 
subsWiaries  in  the  pnxMct  ^  service  names  may  be  trademarks  or  service  marks  of  others.  ©2005  IBM  Corporation.  All  rights  reserved. 
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Consumers  in  the  U.S. 

enjoy  video  clips  and 
even  receive  live  TV 
broadcasts  on  their  wire¬ 
less  phones  and  other 
handheld  devices.  Teenagers  in  Japan 
chat  with  their  friends  using  wireless 
videoconferencing  over  their  cell 
phones.  With  such  innovations,  some 
IT  executives  in  the  U.S.  look  forward 
to  a  time  when  they  can  transmit  video 
content  or  even  conduct  videoconfer¬ 
encing  over  handheld  devices  for  busi¬ 
ness  purposes. 

“I  think  the  most  innovative  and  ag¬ 
gressive  health  centers  are  on  the 
brink”  of  mobile  video  applications, 
says  John  Wade,  CIO  at  Saint  Luke’s 
Health  System  Inc.  in  Kansas  City,  Mo., 
noting  that  many  hospitals  are  already 
expanding  wireless  LANs  and  getting 
more  physicians  to  carry  mobile  tech¬ 
nology.  “I’d  be  surprised  if  mobile 
video  wasn’t  leading-edge  technology 
in  24  months.” 

The  allure  of  a  Dick  Tracy  two-way 
wristwatch  with  video  capability  is 
alive  for  some  potential  users,  but  the 
reality  may  still  be  years  off,  according 
to  IT  executives  and  analysts. 


CIOs  envision  a  range  of  applica¬ 
tions,  mainly  in  health  care  and  service 
industries.  For  example,  a  mechanic 
working  deep  inside  a  ship  or  plane 
could  be  wearing  a  wireless  heads-up 
display  —  a  device  like  a  visor  that’s 
equipped  with  a  video  screen  —  that 
receives  an  audio  or  video  tutorial  on 
a  part  he  is  trying  to  install.  The  need¬ 
ed  information  would  be  right  in  front 
of  the  mechanic,  rather  than  back  at  a 
desktop.  Or,  a  service  worker  fixing 
a  home  washing  machine  could  con¬ 
sult  a  Web  site  with  numbers  and  pic¬ 
tures  of  parts,  perhaps  to  watch  an 
animation  of  how  a  part  works  or  to 
check  with  his  boss  via  a  real-time 
videoconference. 

At  Maytag  Corp.,  videoconferencing 
over  handhelds  would  be  “tremen¬ 
dous”  help  in  transmitting  technical 
drawings  and  other  visual  information 
to  and  improving  communications 
among  more  than  800  field-service 
technicians,  says  CIO  Ernie  Park. 

And  in  health  care,  the  process  of 
consulting  a  medical  expert  in  another 
city  could  be  improved  by  the  trans¬ 
mission  of  charts  and  other  data  over  a 
wireless  video  link  that  also  enhances 


The  technologyfor  mobile 
video  is  in  place,  and  it’s  poised 
to  take  off  in  some  industries  - 
but  wide  adoption  is  a  ways  off. 

By  Matt  Hamblen 


www.computerworld.com 


TECHNOLOGY 


Take  a  Look  at  This 


VIDEO  MOBILE  applications 
are  already  emerging  in  work¬ 
places  such  as  FoxHollow 
Technologies  Inc.  in  Redwood 
City,  Calif. 

More  than  250  sales  repre¬ 
sentatives  from  the  medical 
technology  company  have 
been  using  Palm  Inc.’s  Treo 
600  and  650  handheld  smart 
phones  for  nearly  two  years  to 
play  animation  clips  showing 
their  main  product  at  work. 

The  two-minute  clip  resides 
on  a  memory  card  inserted  in 
the  device,  which  is  easy  for 
sales  reps  to  pull  out  quickly 
to  show  a  doctor  who  is  in  a 
hurry  and  might  not  wait  for  a 
laptop  to  be  booted  to  play  the 
clip,  says  Norman  Leong,  help 
desk  supervisor  at  FoxHollow. 
“It’s  much  faster  than  pulling 
out  a  laptop  -  taking  a  few 
seconds  for  Treo  versus  two 
minutes  for  the  laptop,"  he 
estimates. 

FoxHollow  makes  a  feder¬ 
ally  approved  medical  device 


called  the  SilverHawk  Plaque 
Excision  System  that  helps 
doctors  remove  arterial  plaque 
mainly  from  the  legs  of  pa¬ 
tients.  It  uses  a  tiny  rotating 
blade  to  shave  away  plaque 
from  inside  the  artery. 

The  purpose  of  the  two- 
minute  animation  and  two 
other  videos  is  to  quickly  show 
medical  personnel  how  the 
device  works,  Leong  says. 
Doctors  could  watch  the 
videos  on  the  FoxHollow  Web 
site  but  might  never  get  a 
chance.  The  videos  can  also 
be  shown  to  patients  about  to 
undergo  the  procedure  -  and 
that  process  is  simpler  with  a 
handheld  than  it  is  with  a  lap¬ 
top,  he  says. 

While  the  video  is  stored 
with  a  manual  synchroniza¬ 
tion,  the  reps  also  use  the 
Treos  wirelessly  with  Good 
Technology  serving  as  the 
e-mail  provider. 

Several  times,  sales  reps 
have  worn  hospital  scrubs  to 


watch  a  procedure  and  have 
e-mailed  their  colleagues  for 
advice  when  a  minor  compli¬ 
cation  with  the  medical  device 
arose.  They  have  gotten  quick 
responses,  and  the  e-mail  to 
the  handheld  has  played  an 
important  role,  Leong  notes. 

Leong  wouldn’t  say  the 
Treos  have  been  exactly  mis¬ 
sion-critical  for  FoxHollow,  but 
he  did  say,  “If  a  Treo  goes 
down  in  the  field,  we  find  out 
about  it  within  minutes." 

In  the  future,  reps  could 
even  use  a  camera  on  the 
Treo  to  record  a  procedure 
and  transmit  it,  he  says. 

Despite  the  small  size  of 
the  Treo,  the  650  has  “quite 
good  video  clarity"  with  reso¬ 
lution  of  320  by  320  pixels. 
“You  can  see  it  and  hear  it,"  he 
says.  In  other  words,  it  has 
practical  value  for  playing 
video,  something  that  could 
be  eventually  used  in  a  wire¬ 
less  network. 

-Matt  Hamblen 


the  communication  by  transmitting  the 
faces  of  participants,  adds  Wade. 

Although  diagnosing  a  patient  over 
a  tiny  video  device  might  sound  far¬ 
fetched  today,  it  could  eventually  be  an 
extension  of  what’s  already  happening 
between  doctors  and  patients  using 
larger  videoconferencing  monitors 
over  wired  networks  at  the  University 
of  Texas  Medical  Branch  (UTMB). 

Mobile  videoconferencing  could  be 
useful  in  some  clinical  areas,  including 
mental  health  intervention,  or  for  diag¬ 
nosing  conditions  such  as  skin  disor¬ 
ders,  says  Glenn  Hammack,  assistant 
vice  president  and  executive  director 
at  UTMB  in  Galveston. 

Advances  and  Barriers 

|  Technology  will  advance  in  the  next 

two  to  five  years  to  greatly  expand 

I  wireless  bandwidth  and  improve  video 

resolution  on  the  screens  of  small  de¬ 
vices,  areas  that  hold  back  some  effec¬ 
tive  video  communications  today,  says 
John  Stehman,  an  analyst  at  Robert 
Frances  Group  Inc.  in  Westport,  Conn. 

But  some  of  the  technologies  neces¬ 
sary  to  support  wireless  video  may  lag 
for  much  longer.  Take  batteries,  for 
example.  Today,  a  long  video  clip  run¬ 


ning  on  a  cell  phone  can  drain  the 
phone’s  battery,  says  Jeffrey  McDowell, 
a  director  of  independent  software 
vendor  alliances  at  Research  In  Motion 
Ltd.  (RIM)  in  Waterloo,  Ontario.  For 
the  immediate  future,  RIM  is  concen¬ 
trating  on  support  for  its  traditional 
customers’  needs  for  reliable  and  se¬ 
cure  data,  not  video,  he  adds. 

One  RIM  partner,  Mirifex  Systems 
LLC  in  Strongsville,  Ohio,  which  builds 
mobile  business  applications,  is  count¬ 
ing  on  customers  continuing  to  ask 
for  the  basics  in  their  applications, 
such  as  secure  e-mail,  says  CEO  Bill 
Nemeth. 

Meanwhile,  Chris  McGugan,  senior 
director  for  wireless  product  manage¬ 
ment  at  Symbol  Technologies  Inc.,  says 
“there  are  some  markets  where  video 
on  mobile  could  work,”  but  he  describes 
it  as  an  application  that  won’t  be  com¬ 
monplace  until  fairly  far  into  the  fu¬ 
ture.  And  Rick  Osterloh,  vice  president 
of  products  at  Good  Technology  Inc.,  a 
RIM  competitor,  calls  video  on  mobile 
devices  an  emerging  technology. 

Most  of  the  wireless  carriers  in  the 
U.S.  are  aggressively  marketing  video 
clips  and  animations  to  consumer  users, 
but  interest  in  mobile  videoconferencing 


seems  limited  to  Asian  countries  so  far. 

“I’m  not  really  hearing  much  about 
mobile  video  for  business  uses  from 
service  providers  or  vendors,”  says 
Stehman  at  Robert  Frances  Group. 
“Certainly  verticals  such  as  medical 
and  construction  will  see  it,  but  it’s 
predicated  on  when  we  get  next-gener¬ 
ation  networks  and  enough  cell  sites, 
and  that’s  not  going  to  be  until  after 
2006.”  Stehman  says  IT  executives  can 
make  long-term  plans  to  decide  which 
applications  might  be  desirable  once 
mobile  video  technology  becomes 
more  feasible. 

The  Comfort  Factor 

Video  mobile  technology  advance¬ 
ments  won’t  play  as  big  a  role  in  the 
planning  process  as  the  comfort  level 
of  users,  warns  Saint  Luke’s  Wade.  “It 
will  truly  be  up  to  those  innovative 
doctors  and  nurses  who  value  access 
to  information  more  than  complying 
with  ‘the  way  we’ve  always  done  it’ 
mentality,”  he  adds. 

Allen  Nogee,  an  analyst  at  In-Stat  in 
Scottsdale,  Ariz.,  also  believes  the  user 
acceptance  of  mobile  video  and  video- 
conference  will  be  vital.  Based  on  his 
observations  of  teenage  users  in  Japan, 
he  says,  videoconferencing  over  a  cell 
phone  today  is  ergonomically  difficult. 
“If  you  hold  the  phone  with  a  camera, 
you  have  to  point  it  at  yourself  so  you 
frame  yourself,  but  you  might  only  be 
guessing,  and  then  it  might  be  too  far 
away  to  pick  up  your  voice,”  he  says. 

To  accommodate  the  awkwardness  of 
videoconferencing,  some  phones  have 
two  cameras,  each  pointing  in  opposite 
directions,  with  one  designed  to  show 
what  the  camera  person  is  seeing, 
he  adds. 

Nogee  says  the  value  of  certain  visu¬ 
al  mobile  applications  is  clear.  For  ex¬ 
ample,  a  realtor  could  send  still  photos 
of  a  home  from  a  cell  phone  —  but  that 
doesn’t  take  advantage  of  moving  pic¬ 
tures  at  all,  he  adds.  But  Nogee  ques¬ 
tions  the  value  of  videoconferencing 
with  a  small  device,  given  the  ergo¬ 
nomics  involved.  “Certainly,  a  lot  of 
businesses  will  have  video  mobile  ap¬ 
plications  in  five  years  in  the  U.S.,  and 
the  technology  is  not  the  stumbling 
block,”  he  says.  “The  question  is 
whether  people  will  want  to  do  it.” 

A  recent  survey  from  In-Stat  shows 
that  one  in  eight  consumers  today  is 
interested  in  purchasing  mobile  video 
services  from  a  wireless  provider. 
That’s  enough  for  the  technology  to 
generate  significant  revenue  for  carri¬ 
ers,  says  In-Stat  analyst  David  Cham¬ 
berlain.  The  number  of  consumers 
purchasing  mobile  video  content  will 
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reach  1.1  million  this  year  in  the  U.S., 
and  it  will  grow  to  more  than  30  mil¬ 
lion  in  2010,  In-Stat  forecasts. 

Carriers  such  as  Sprint  Nextel  Corp. 
are  making  a  big  push  to  capture  the 
teen  market.  Sprint  Nextel,  for  exam¬ 
ple,  offers  a  service  called  Varsity  Mo¬ 
bile,  which  features  first-run  shows 
and  viewer  interactivity.  Carriers  and 
analysts  note  that  this  very  group  of 
13-to-18-year-old  consumers  will  even¬ 
tually  grow  up  and  take  jobs  where 
they’ll  be  challenging  IT  staffs  to  look 
for  work-related  mobile  video  applica¬ 
tions.  O  57255 


ON  THE 
CONTRARY 


VIDEO  OVER  MOBILE  in  a  business 
setting  is  unquestionably  cool,  but 
some  observers  have  raised  ques¬ 
tions  about  how  useful  it  will  be. 

“Enterprises  are  going  to  be  ask¬ 
ing,  ‘Who  is  going  to  pay  for  this  ap¬ 
plication?’  and  they  will  constantly 
be  grappling  with  the  why  and  the 
business  reason  for  it,”  says  Allen 
Nogee,  an  analyst  at  In-Stat. 

A  big  amplifier  of  today’s  buzz 
around  mobile  video  applications 
comes  from  network  providers  eager 
to  sell  minutes,  and  so  far  they’ve 
focused  heavily  on  young  users  who 
might  download  video  clips  or  play 
live  TV  with  summaries  of  the  latest 
sports  scores,  Nogee  says.  Not  ex¬ 
actly  business-centric  uses.  “The 
U.S.  carriers  are  all  talking  about  it, 
but  our  surveys  of  end  users  show 
only  10%  to  15%  want  it,”  he  says. 

While  Nogee  acknowledges  that 
there’s  value  in  a  still  shot  sent  wire¬ 
lessly  of  a  car  accident  or  a  building 
under  construction,  he  adds,  “What 
is  the  value  of  videoconferencing? 

“Converged  technologies  [involv¬ 
ing  video  and  mobile]  will  happen  in 
the  consumer  market,  and  whether 
that  conflicts  with  use  in  an  enter¬ 
prise  remains  to  be  seen,”  he  says. 

“You  have  the  carriers  hyping  their 
new  high-speed  networks,  and  video- 
conferencing  is  an  easy  answer  for  what 
will  be  used,  but  I  don’t  necessarily  think 
it  will  be  readily  used,”  Nogee  says.  He 
notes  that  specialized  industries,  includ¬ 
ing  medicine,  will  find  uses  for  training 
and  information-sharing  that  can’t  be 
handled  easily  with  still  images.  “In  cer¬ 
tain  verticals,  video  over  mobile  will  be 
very  important  and  refined,”  Nogee 
says,  “but  they  won’t  make  up  a  large 
part  of  overall  business.” 

-  Matt  Hamblen 
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Voice  technologies  now  in  the  labs 
mean  the  answer  will  be  yes. 

By  Linda  Rosencrance 


very  few  years,  researchers 
say  that  automated  voice 
recognition  technology  has 
finally  arrived,  but  it  seems 
as  though  the  reality  never 
lives  up  to  the  hype. 

For  the  past  two  decades,  systems 
that  enable  touch-tone  responses  to 
automated  voice  prompts  have  been 
used  by  businesses  for  telephone- 
based  routing  and  self-service.  But  to¬ 
day,  a  large  number  of  businesses  are 
investing  in  newer  two-way  interactive 
voice  response  (IVR)  to  move  beyond 
the  limitations  of  touch-tone. 

Datamonitor  PLC,  a  market  research 


firm  in  New  York,  says  the  next  five 
years  will  see  widespread  deployment 
of  IVR  across  companies,  and  the  ap¬ 
plications  of  speech  recognition  will 
grow  in  complexity  and  sophistication. 

In  particular,  says  Datamonitor  ana¬ 
lyst  Daniel  Hong,  “in  the  next  five 
years,  the  market  will  witness  several 
large  voice-authentication  deploy¬ 
ments,  primarily  in  the  financial  ser¬ 
vices  market,  because  of  the  increasing 
need  for  security  and  a  proliferation  of 
PIN/password-reset  applications.” 

One  company  that  offers  such  an  ap¬ 
plication  today  is  Nuance  Communica¬ 
tions  Inc.  in  Menlo  Park,  Calif.  Here’s 


FUTURE 

WATCH 


how  Nuance’s  system  works:  A  caller 
spends  a  few  moments  “enrolling”  his 
voice,  creating  a  “voiceprint.”  Then, 
when  calling  the  application  at  a  later 
time,  his  voice  is  compared  with  the 
voiceprint  on  file.  If  there’s  a  match,  the 
caller  is  validated. 

In  the  next  five  years,  there  will 
also  be  a  tighter  integration  between 
speech  engines  and  speech  applica¬ 
tions,  which  tend  to  be  separate  pieces 
of  software  today,  says  Jim  Blake,  a  se¬ 
nior  software  engineer  at  San  Diego- 
based  Lumen  Vox  LLC. 

That  will  improve  the  accuracy  of 
speech  engines  by  enabling 
them  to  get  clues  about  users 
and  applications  when  they 
are  stumped,  he  says. 

For  example,  if  the  speech 
engine  in  an  airline  reservation  system 
recognizes  the  cities  spoken  by  a  user 
but  not  the  flight  numbers,  it  might  ask 
the  application  for  a  list  of  possible 
flight  numbers.  “This  is  all  done  in  one 
interaction,”  Blake  says.  “Typically, 
if  one  section  of  the  audio  isn’t  un¬ 
derstood  well,  the  caller  must  be  re¬ 
prompted  for  the  missing  information. 
But  in  our  example,  we  are  making  the 
[speech  recognizer]  smarter  by  talking 
with  the  application.” 

Real  Conversations 

Moreover,  those  applications  will  be 
able  to  handle  a  user’s  request  in  a  more 
human  way,  says  Peter  Mahoney,  vice 
president  of  ScanSoft  Inc.,  a  supplier  of 
speech  software  in  Burlington,  Mass. 

“Today,  if  you’re  talking  to  an  auto¬ 
mated  system  to  make  a  flight  reserva¬ 
tion,  you  have  to  tell  the  system  what  it 
wants  to  hear  in  the  way  it  wants  to 
hear  it,”  Mahoney  says.  The  system 
will  ask  you  where  you’re  departing 
from,  where  you’re  going  and  the  date 
you  want  to  leave. 

“However,  in  the  next  few  years,  the 
system  will  say,  ‘Tell  me  about  the  trip 
you’d  like  to  take,’  and  you’ll  say,  ‘I’d  like 
to  go  from  Boston  to  New  York  next 
Thursday,  and  by  the  way,  I’m  traveling 
with  two  people,’  ”  Mahoney  says.  “The 
intelligent  system  should  be  able  to 
parse  that  all  out,  identify  enough 
meaning  from  the  pieces  that  are  com¬ 
municated  through  the  person’s  dia¬ 
logue  and  then  ask  follow-up  questions. 


“Most  speech  applications  today  are 
completely  unable  to  deal  with  conver¬ 
sations  that  deviate  from  a  very  tightly 
specified  call  flow,  which  means  that 
when  callers  do  deviate  from  the  mod¬ 
el  —  and  the  data  shows  they  deviate 
frequently  —  application  performance 
and  caller  experience  suffer,”  he  says. 
“By  creating  and  implementing  much 
more  flexible  dialogue  management 
models,  next-generation  products  will 
keep  more  callers  in  the  application 
and  allow  them  to  converse  with  the 
application  in  a  more  efficient,  more 
natural  manner.” 

One  of  the  things  that  will 
drastically  change  in  the 
world  of  voice  recognition  in 
the  next  several  years  is  that 
vendors  will  provide  cus¬ 
tomers  with  the  tools  necessary  to  eas¬ 
ily  update  their  voice  applications,  says 
Azita  Martin,  vice  president  of  market¬ 
ing  at  TuVox  Inc.,  a  Cupertino,  Calif.- 
based  supplier  of  enterprise  software 
for  speech  applications. 

“Today . . .  the  applications  are  hard 
to  change,”  she  says.  “So  every  time 
companies  want  to  update  their  speech 
applications  . . .  they  have  to  call  the 
vendor,  and  that’s  very  expensive.” 
Martin  says  vendors  will  come  up  with 
tools  that  have  powerful  graphical  user 
interfaces  so  companies  will  be  able  to 
update  their  speech  applications  the 
same  way  they  update  their  Web  sites. 

In  another  development,  researchers 
at  IBM  are  working  on  software  that 
recognizes  emotions  in  speech. 

“We  are  working  on  making  speech 
be  expressive,  which  is  to  . . .  create  the 
speech  output  that  matches  the  mood 
of  the  person  [using  an  IVR  system],” 
says  David  Nahamoo,  a  manager  in  hu¬ 
man  language  technologies  at  IBM  Re¬ 
search.  “Is  the  person  [delivering]  good 
news,  bad  news,  sad  news  or  an  angry 
message?  We  are  trying  to  provide  an 
automatic  way  to  create  any  persona 
that  a  customer  wants.” 

IBM  is  also  working  on  a  voice- 
recognition  engine  that  can  identify 
various  accents  and  dialects,  he  says. 

“We  need  to  keep  improving  on  the 
performance  of  all  of  these  engines 
year  to  year,  to  be  able  to  support  and 
address  the  growth  in  expectation  by 
users,”  Nahamoo  says.  ©  57440 
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IBM  Financing  Advantage 

Only  $206/mo.3 
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IBM  eServer  OpenPower  720  Express 

Built  on  IBM  POWER5™  technology 
and  tuned  for  Linux9 
2-  or  4-way  64-bit,  rack  or  tower  models 

Up  to  8GB  of  memory,  disk  capacity 

up  to  1.1TB1  __ _ _ _ : 

Optional  Advanced  Virtualization  features 

DB2"  Express  Discover  CD 

Limited  warranty:  up  to  3  years  on-site2 

From  $9,774* 


IBM  Financing  Advantage 

Only  $273/mo3 
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IBM  TotalStorage  3580  Express 

Helps  protect  LTO™  investment 
Built  on  UltriuirT  3  technology 

Read/write  compatible  with  Uitrium  2  drives 
-  read  compatible  with  Uitrium  1  drives 

Up  to  800GB  cartridge  physical  capacity 
with  2:1  compression1 

Limited  warranty:  3  years  on-site2 


From  $5,850* 

IBM  Financing  Advantage 

Only  $164/'mcr 


Learn  more  about 
our  full  range  of 
IBM  Express  products 
and  find  the 
IBM  Business  Partner 
near  you. 


1  800-IBM-7777 

mention  104CE05A 


‘All  nrirps  staled  are  IBM's  estimated  retail  selling  prices  as  of  September  13, 2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are 
subject  to  availability  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  1.  Denotes  taw  storage  capacity 
f  sable  caoacitv  mav  be  less  2  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  techmim  Ou-sfe  warranty 
£ !va3S  tofseleScomponents.  3.  IBM  Global  Financing  offerings  are  provided  through  IBM  Credit  LLC  in  the  United  Slates  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified  commercial  and 
novernment  customers.”  Monthly  payments  provided  are  for  planning  purposes  only  and  may  vary  based  on  your  credit  and  other  factors.  Lease  offer  provided  is  based  on  a  FMV  lease  of  36  monthly  payments.  Othei 
restrictions  mav  aoDlv  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  IBM,  the  IBM  logo,  eServer, TotalStorage,  OpenPower,  POWER.)  and  DB2  are  trademarks  oi  >  egistered  trademarks 
STntemiSforual^f^s^nessMachines  Corporation  in  the  United  States  and/or  other  countries.  Linux  is  a  trademark  ol  Linus  Torvalds  in  the  United  Slates  and  other  countries.  LTO  and  Uitrium  are  trademarks  of  Cerlano 
HP  and  IBM  in  the  U.S.  and  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  ot  others.  ©2005  IBM  Corporation.  All  rights  reserved. 
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A  STROLL  THROUGH  THE  TECHNOLOGY  LANDSCAPE 


No  one  managed  to  win  top  honors  in  NASA’s 
Beam  Power  Challenge  and  its  Tether  Challenge, 
competitions  to  develop  technologies  that  could  be 
used  in  space  elevators.  The  two  $50,000  prizes 
went  unawarded  in  last  month’s  contests  in  Moun¬ 
tain  View,  Calif.,  because  none  of  the  10  finalists 
managed  to  meet  all  of  NASA’s  qualifying  criteria. 

To  win  the  Beam  Power  Challenge,  teams  had  to 
construct  robotic  climbers  capable  of  climbing  up 
and  down  a  50-meter  cable  in  under  50  seconds, 
powered  only  by  the  light  from  a  10,000-  watt 
searchlight. 

In  the  Tether  Challenge,  teams  had  to  produce 
high-strength,  low-weight  tethers.  Part  of  the  com¬ 
petition  was  a  head-to-head  strength  test,  which 
was  won  by  the  Centaurus  Aerospace  team.  To  win 
the  jackpot,  though,  the  tether  had  to  be  50% 
stronger  than  a  commercially  available  material.  In 


Space  Elevator 
Contestants 
Go  Down 


GROVES  OF  ACADEME 


Researchers  Find  Missing  Link 


Scientists  at  The  University  of  Manchester  in 
England  have  made  a  major  breakthrough  that 
could  hold  the  key  to  creating  the  first  practical 
quantum  computers. 

Professor  Richard  Winpenny  of  the  School 
of  Chemistry  and  a  team  of  in¬ 
ternational  researchers  have 
for  the  first  time  demonstrated 
how  qubit  (quantum  bit)  rings  - 
pieces  of  quantum  information 
-can  be  linked  together. 

The  research  found  that  the 
qubit  rings,  when  attached  us¬ 
ing  a  hydrogen  bond,  remain 
stable  in  a  resting  state.  It  was 
also  found  that  the  rings  can  be 
brought  into  close  proximity 
without  changing  their  magnetic 
behavior  due  to  through-space 
exchange.  This  leads  to  the  pos¬ 
sibility  of  a  switch  being  incorporated  that  uses 
the  exchange  of  electrons  within  the  bonds  of 
molecules. 

The  breakthrough,  which  follows  three  years 
of  research,  opens  up  the  possibility  of  being 


able  to  create  quantum  gates,  a  more  advanced 
version  of  the  processors  found  in  modern 
computers. 

“Linking  these  molecules  not  only  gives  us  a 
much  better  understanding  of  how  these  mole¬ 
cules  interact,  but  it  also  gives 
us  more  control  over  how 
they  interact,  which  is  essen¬ 
tial  if  we  are  to  ever  success¬ 
fully  implement  quantum 
gates,”  says  Winpenny.  "This 
is  the  start  rather  than  the  fin¬ 
ish  in  terms  of  the  develop¬ 
ment  of  a  quantum  computer. 
But  now  that  we  have  shown 
we  can  do  this,  it  gives  us 
clear  targets.” 

If  built,  quantum  comput¬ 
ers  would  be  the  most  power¬ 
ful  computers  ever  made, 
with  speeds  millions  of  times  faster  than  the  av¬ 
erage  PC  for  some  calculations.  Those  speeds 
would  be  valuable  in  factoring  large  numbers 
and  therefore  extremely  useful  for  encrypting 
information.  ©  57723 


Electron  microscope  image 
of  a  qubit  from  Hans  Mooij's 


research  group  at  Delft 
University  of  Technology. 


fact,  although  the  Centaurus  team's  tether  man¬ 
aged  to  carry  544  kilograms  before  snapping, 
NASA’s  in-house  tether  was  still  stronger,  register¬ 
ing  590  kilograms  before  it  failed. 

Both  purses  will  roll  over  into  next  year’s  contest, 
says  NASA,  and  the  competitions  will  be  more  diffi¬ 
cult:  The  teams  will  have  to  create  their  own  power 
supplies  for  the  climbing  robots,  and  the  tethers  will 
have  to  be  even  stronger. 


Page  compiled  by  Tommy  Peterson. 


Plans  for  WLANs 

For  which  of  the  following  applications 
are  you  planning  to  use  your  wireless 
LAN  in  the  next  12  months? 

Employee  mobility 


■ _ 66%  m 


Conference-room  access 


5% 


BASE:  224  network  equipment  decision-makers  at  North 
American  enterprises  that  are  not  decreasing  their  WLAN 
developments  (multiple  responses  accepted) 

SOURCE:  Forrester  Research  Inc.. 
Cambridge,  Mass..  July  2005 
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CALIFOM 


Notebooks.  Desktops.  Monitors. 

Gateway  is  approved  to  provide  all  three  to  the  California  State  Government. 


Through  the  California  Strategic  Sourcing  Initiative  (CSSI),  the  Department  of  General  Services  has 
chosen  Gateway  as  a  provider  of  notebooks,  desktops  and  monitors  to  California  government 
agencies.  Now  you  can  streamline  all  your  technology  purchases  from  one  convenient  source  and 
receive  exclusive  DGS  pricing  on  value-packed  Gateway  products. 

Gateway  has  been  serving  state  and  local  agencies  for  20  years  and  understands  your  challenges. 
An  exclusive  online  eProcurement  site,  priority  access  support  and  unmatched  account 
management  are  just  some  of  the  ways  Gateway  can  help  your  agency  remain  productive  24/7  to 
serve  your  constituency. 

Simply  stated,  Gateway  is  good  for  government.  Gateway  is  good  for  California. 


ORDER  TODAY.  CALL  US  AT  1-888-444-4925  OR  VISIT  US  ONLINE  AT  Gateway.com/CAGov 


GATEWAY"  E-4500  DESKTOP 


Intel*  Pentium*  4  Processor 
with  HT  Technology1 

Shown  with  optional  1 7"  monitor 


GATEWAY*  M460E  NOTEBOOK 


... 


Crisp,  Clear  Images 


Intel*  Centrino™  Mobile  Technology1 


'  V-'  <  I'M- 

tctf 

Workstation,  Agreement  #15-05-70-02-02,  IT  Hardwari 


information.  ©  2005  Gateway, Inc.  All  rights  reserved.  Trademarks  used  herein ; 
Xeon,  Intel  SpeedStep,  Itanium/and  Pentium  are  trademarks  or  registered  trai 
activation  reguirements  at  gateway. com/ms-req.  Not  responsible  for  typographi 
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Howto  GetaJob 
In  the  Infosec  Field 

Lots  of  readers  wondered  where  all  those 
security  jobs  our  manager  talks  about  are, 
so  she  did  a  little  research.  By  C.  J.  Kelly 


Y  decision  to  stay  in 
my  current  job  for 
quality-of-life  rea¬ 
sons  provoked  emo¬ 
tional  responses  from  several 
readers.  Some  of  those  who 
wrote  to  me  about  that  column 
[QuickLink  57182]  had  made 
similar  decisions.  But  a  few, 
after  reading  about  how  I 
turned  down  multiple  job 
offers,  asked,  “Where  are  all 
these  jobs  you  keep 
talking  about?”  I  felt 
compelled  to  do  a  lit¬ 
tle  research  on  the  in¬ 
formation  security 
job  market  and  pre¬ 
sent  the  results  here. 

First,  I  did  an  un¬ 
scientific  survey  of  the  pub¬ 
licly  posted  jobs.  In  my  case, 
most  of  the  jobs  I’ve  had  have 
come  from  personal  referrals, 
so  when  I’m  looking,  the  first 
thing  I  do  is  contact  my  net¬ 
work  of  friends  and  col¬ 
leagues.  However,  I  have 
found  that  searching  the  job 
boards  gives  me  a  sense  of 
the  types  of  jobs  that  are  out 
there,  who’s  hiring  and  ap¬ 
proximate  salary  ranges. 

I  set  out  to  answer  five 
questions  with  this  research: 

1.  How  many  security  jobs 
are  out  there? 

2.  What  types  of  security 
jobs  are  out  there? 

3.  What  requirements  do 
employers  have  for  certifica¬ 
tions  and  degrees? 

4.  Wliat  parts  of  the  country 
have  more  security  jobs  than 
others? 

5.  What  are  the  salary 
ranges? 

Whenever  I’m  contacted  by 
a  recruiter  looking  for  security 
professionals,  I  point  him  in 
the  direction  of  the  Interna¬ 
tional  Information  Systems 


Security  Certification  Consor¬ 
tium  Inc.,  or  (ISC)2,  which  of¬ 
fers  the  Certified  Information 
Systems  Security  Professional 
(CISSP)  certification.  When  I 
checked  its  site,  the  (ISC)2  had 
over  80  security  job  postings, 
many  with  multiple  positions, 
for  the  month  of  October.  The 
positions  ran  the  gamut  from 
salespeople  to  technical  secu¬ 
rity  engineers,  executives  and 
consultants.  The 
companies  advertis¬ 
ing  for  security  pro¬ 
fessionals  were  lo¬ 
cated  all  over  the 
map,  including 
Canada,  England, 
Saudi  Arabia  and 
California.  Eighty  didn’t 
seem  like  a  very  big  number, 
though,  so  I  surfed  to  some 
of  the  major  job  boards. 

Each  job  board  has  its 
own  way  of  making  searching 
easier,  but  by  searching  for 
“CISSP”  for  October,  I  got  the 
following  results:  Dice,  645 
matches;  Hotjobs,  1,000; 
CareerBuilder,  713;  Monster, 
over  800  matches. 

There  were  plenty  of  job 
postings  from  the  Big  Four 
consulting  houses  looking  for 
security  types  to  do  audit 
work,  traveling  100%  of  the 
time  for  $40  per  hour  or  less. 
For  a  qualified  security  profes¬ 
sional,  that’s  practically  mini- 


You  need  to  know 
what  you  are  best  at 
and  look  for  jobs  that 
match  your  skill  set. 


mum  wage.  Working  for  one 
of  the  Big  Four  looks  good  on 
your  resume,  gives  you  a  lot  of 
experience  (primarily  in  IT 
audit)  and  makes  you  an  ex¬ 
pert  in  dealing  with  airports, 
hotels  and  rental  car  compa¬ 
nies.  I  would  exclude  the  big 
consulting  companies.  They 
charge  exorbitant  prices,  but 
very  little  of  that  goes  to  the 
consultant  who  does  the  job.  I 
also  think  companies  would 
do  better  hiring  full-time  secu¬ 
rity  people  and  internal  audi¬ 
tors.  (No  offense  to  you  Infor¬ 
mation  Systems  Audit  and 
Control  Association  types;  I 
am  also  a  member!) 

The  biggest  problem  with 
searching  was  finding  the 
right  security  job  description 
for  me.  There’s  no  real  agree¬ 
ment  on  what  constitutes  a  se¬ 
curity  engineer  as  opposed  to 
a  security  analyst  or  a  security 
architect.  Executive  positions 
(director  level  and  above) 
aren’t  always  posted,  but  those 
that  are  seem  to  be  fairly  clear 
about  requirements. 

Types  of  Jobs 

The  answer  to  the  question 
about  the  types  of  jobs  out 
there:  You  need  to  know  what 
you  are  best  at  and  look  for 
jobs  that  match  your  skill  set. 
There  are  plenty  of  opportuni¬ 
ties,  though  many  of  them  are 
ill  defined.  Many  companies 
don’t  really  know  what  they 
want  and  need,  so  you  have  to 
keep  knocking  on  doors  until 
you  find  one  that  swings  open 
enthusiastically. 

As  for  certifications  and 
degrees,  my  first  conclusion 
is  that  you  should  finish  that 
bachelor’s  degree  if  you  haven’t 
already  done  so.  Not  too  long 
ago,  technical  people  were 
hired  based  on  a  particular 
skill  set,  not  necessarily  on 
formal  education.  But  the 
trend  now  is  toward  demand¬ 
ing  that  sheepskin,  and  a  bach¬ 


elor’s  degree  seems  to  be  the 
minimum  requirement  for  a 
large  number  of  posted  jobs. 

In  many  cases,  a  master’s  de¬ 
gree  is  desired.  I  also  found 
that  employers  want  degrees 
to  be  supplemented  by  a  string 
of  technical  certifications.  The 
bar  seems  to  be  rising. 

The  CISSP  is  a  very  popular 
and  highly  regarded  certifica¬ 
tion,  but  the  SANS  Institute 
also  offers  an  excellent  certifi¬ 
cation  series  that’s  highly  re¬ 
spected.  As  Linux  becomes 
more  mainstream,  Red  Hat 
certifications  are  growing  in 
importance.  Microsoft  offers 
the  MCSE+  security  certifica¬ 
tion.  And  let’s  not  forget  Cis¬ 
co.  There  are  many  certifica¬ 
tion  programs,  but  these  are 
on  the  short  list.  They  are  all 
valuable,  each  with  a  different 
emphasis.  The  trick  is  to  find 
the  openings  that  fit  your  cer¬ 
tifications  and  skills,  and  just 
keep  knocking  on  those  doors. 

In  the  U.S.,  the  West  and 
East  Coasts  appear  to  have 
more  security  jobs  than  other 
parts  of  the  country,  and  they 
pay  more  —  sometimes  two  to 
three  times  as  much.  Just  re¬ 
member  that  the  cost  of  living 
matches  those  increased  pay 
scales.  I  noticed  that  the  job 
boards  all  have  ways  of  doing 
area  or  metro  searches,  so  with 
a  little  practice  you  should 
become  fairly  proficient  at 
searching  various  locales  for 
particular  kinds  of  jobs. 

As  for  salaries,  they’ve  been 
all  over  the  map  in  recent 
years,  and  employers  seem  to 
be  hesitant  to  post  anything 
specific  about  them.  Just  re¬ 
member  to  value  yourself  and 
your  skills  in  advance  so  that 
when  you  are  contacted  by  a 
prospective  employer,  you  will 
be  confident  in  your  market 
value.  Remember,  it’s  not 
about  the  money.  It’s  about  do¬ 
ing  what  you  love  where  you 
love  to  do  it.  0 

WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  "C.J.  Kelly,”  whose 
name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  her  at 
mscjkelly@yahoo.com,  or  join  the  dis¬ 
cussion  in  our  forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

©  computerworld.com/secjournal 


SECURITY  LOO 


Security  Bookshelf 

Mapping  Security:  The  Corpo¬ 
rate  Security  Sourcebook  for 
Today’s  Global  Economy,  by 
Tom  Patterson,  with  Scott 
Gleeson  Blue  (Symantec 
Press,  2004). 

The  reader  of  this  book  tra¬ 
verses  the  globe  through 
chapters 
devoted  to 
specific 
countries 
and  areas: 
the  Americ¬ 
as,  the  Mid¬ 
dle  East  and 
Africa,  the 
Asia-Pacific 
region  and 
Europe.  In  each  part  of  the 
world,  the  rules  are  different, 
and  it’s  critical  to  understand 
how  laws  and  culture  can  dic¬ 
tate  which  technologies  can 
be  used.  An  appendix  lists  lo¬ 
cal  security  resources  by 
country.  Reading  this  book 
and  learning  from  the  experi¬ 
ences  of  folks  who  have  been 
doing  cross-border  security 
for  some  time  is  a  privilege. 

-C.J.  Kelly 

i 

Proposed  India  Law 
Could  Hurt  BP0 

Proposed  amendments  to  In¬ 
dia’s  Information  Technology 
Act  wouldn’t  include  business 
process  outsourcing  (BP0) 
companies  among  service 
providers,  which  means  they 
wouldn’t  be  held  liable  for  data 
theft  or  leaks.  The  legislation 
would  hold  cybercafes  and 
search  engines  liable  for  data 
theft.  Cyberlaw  expert  Pavan 
Duggal  told  India's  Business 
Standard  that  the  law  “will 
spell  disaster”  for  the  BP0 
industry  in  India. 

Employers  Increase 
Background  Checks 

Employers  conducted  nearly 
4.4  million  background 
checks  in  2004,  up  16%  from 
2003  and  more  than  300% 
from  eight  years  ago,  accord¬ 
ing  to  the  ADP  Employer  Ser¬ 
vices  Hiring  Index.  Of  criminal 
records  checked,  5%  revealed 
an  infraction. 
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With  Sybase®  software,  the  PRC  Ministry  of  Railways 
developed  an  innovative  ticket  sales  and  reservation  system  that: 


Q  Processes  passenger  traffic  of  more  than  one  billion  people  a  year 

0^  Handles  up  to  5,000  ticket  requests  simultaneously 

0  Captures  and  analyzes  passenger  data  on  national,  regional  and  local  levels 


Replacing  an  outdated,  paper-based  ticketing  system  that  supports  one  of  the  largest  railway  networks  in  the  world  is  a  monumental  task.  That’s  why, 
when  the  People’s  Republic  of  China  (PRC)  Ministry  of  Railways  wanted  the  right  technology  partner,  they  chose  Sybase.  Using  Sybase  Adaptive  Server® 
Enterprise,  Sybase®  10,  and  Replication  Server®  software,  the  PRC  created  an  information  edge  that  enables  passengers  to  purchase  round-trip  or 
one-way  tickets  from  24  regional  ticket  centers,  510  booking  systems  and  over  5,000  counter  terminals.  That  means  customers  are  happier.  Employee 
productivity  is  up.  And  trains  are  filled  with  people. ..and  profits,  www.sybase.com/infoedgell6 


Copyright  ©2005  Sybase,  Inc.  All  rights  reserved.  Sybase,  the  Sybase  logo,  Adaptive  Server  and  Replication  Server  are  trademarks  of  Sybase,  Inc. 
•  indicates  registration  in  the  United  States  of  America.  All  product  and  company  names  are  trademarks  of  their  respective  owners. 
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Tizor  Launches 
Auditing  Appliance 

■  Tizor  Systems  Inc.  in  Maynard, 
Mass.,  has  unveiled  a  new  add-in 
network  appliance  that  allows 
companies  to  monitor  and  audit 
employee  activities  with  mission- 
critical  applications  and  data  in 
real  time.  Designed  to  help  pro¬ 
tect  against  data  theft,  the 
Mantra  Activity  Auditing  appli¬ 
ance  supports  Oracle,  Sybase 
and  SQL  Server  databases  and 
Windows  file  servers.  It  uses  real¬ 
time  analytics  that  include  behav¬ 
ioral  fingerprinting;  instant  snap¬ 
shots  of  multiple  policies  for 
security,  operations  and  senior 
management;  and  on-demand 
compliance  checks,  said  the 
company.  Mantra,  which  starts 
at  $25,000,  is  managed  using  a 
Web  browser-based  interface. 


Verano  Upgrades 
Security  Appliance 

■  Verano  Inc.  in  Mansfield,  Mass., 
has  introduced  Industrial  Defend¬ 
er  2.0.  The  latest  version  of  Vera- 
no’s  security  appliance  suite  fea¬ 
tures  enhanced  security  agents, 
customizable  reporting  and  analy¬ 
sis,  and  increased  scalability.  It’s 
geared  for  power  transmission 
and  distribution  systems,  water 
distribution  and  treatment  equip¬ 
ment,  gas  and  liquid  pipelines, 
mass-transit  systems  and  power- 
generation  companies.  Pricing  for 
the  Industrial  Defender  console  is 
$10,000;  the  Industrial  Defender 
Guard  starts  at  $1,800  for  net¬ 
work  perimeter  protection. 


Oracle  to  Integrate 
PeopleSoft  Apps 

a  Oracle  Corp.  announced  that  it 
will  integrate  the  Strategic  Net¬ 
work  Optimization  and  Produc¬ 
tion  Scheduling  products  from  the 
PeopleSoft  Supply  Chain  Planning 
suite  into  its  E-Business  Suite  11i 
Advanced  Planning  and  Schedul¬ 
ing  application.  The  integrated 
offering  is  meant  to  improve 
supply  chain  efficiency  and  re¬ 
duce  risk.  It  will  ship  in  2006, 
according  to  Oracle. 


JIAN  ZHEN 


Searching  for 
Root  Cause 


IN  A  PREVIOUS  COLUMN,  I  outlined  the  five  steps 
in  the  problem  management  process:  detection, 
identification,  determination,  resolution  and  re¬ 
flection  [QuickLink  56047].  I  explained  how  new 
technologies  will  be  required  to  help  IT  adminis¬ 
trators  determine  the  root  causes  of  IT  problems. 


But  how  do  IT  adminis¬ 
trators  determine  them  to¬ 
day?  One  of  the  most  criti¬ 
cal  steps  is  to  go  through 
the  vast  ocean  of  log  data 
generated  by  the  IT  infra¬ 
structure,  including  router, 
switch,  firewall,  server, 

Web  server  and  application 
logs.  The  logs  contain  a 
wealth  of  information,  such 
as  debugging  or  error  data, 
that’s  not  available  any¬ 
where  else. 

Searching  through  these 
logs  is  usually  the  most  ef¬ 
fective  way  for  IT  adminis¬ 
trators  to  determine  the 
root  cause  of  a  problem.  The  way  it’s 
done  traditionally,  however,  using 
Grep  or  other  Unix  tools,  is  extremely 
inefficient  for  several  reasons. 

First  of  all,  the  Unix  tools  aren’t 
made  to  perform  extremely  fast 
searches  through  logs.  They’re  de¬ 
signed  to  search  through  files  line  by 
line,  starting  from  the  top,  until  some 
entry  matches  the  search  requirement. 
This  can  be  an  excruciating  process 
because  the  matching  entries  could  be 
buried  at  the  end  of  a  huge  log  file  that 
may  be  tens  of  gigabytes. 

Second,  these  tools  have  no  concept 
of  time.  Almost  all  logs  have  time 
stamps  and  can  tell  IT  administrators 
what  happened  at  that  specific  mo¬ 
ment  in  time.  However,  the  Unix  tools 
don’t  recognize  this  time  stamp.  Imag¬ 
ine  that  you  want  to  search  for  only  a 
five-minute  block  near  the  end  of  the 


day,  and  the  log  file  is  a 
day’s  worth  of  data.  The 
Unix  tools  will  start 
searching  from  the  start  of 
the  file  and  will  take  a  very 
long  time  to  get  to  the  de¬ 
sired  five-minute  block. 

Third,  there  is  no  effec¬ 
tive  way  to  express  sophis¬ 
ticated  search  commands 
with  the  tools.  For  exam¬ 
ple,  to  search  for  logs  that 
have  either  words  login 
or  logon,  but  not  root  or 
zhenjl,  the  IT  administra¬ 
tor  would  have  to  connect 
a  set  of  sophisticated  Unix 
commands  together. 

Finally,  when  the  IT  administrator 
finds  the  desired  log  entry,  there’s  no 
efficient  way  to  drill  down  to  find  out 
what  came  before  or  after  that  entry. 
It’s  extremely  important  to  do  that, 
since  the  root  cause  usually  comes 
before  the  actual  problem. 

So,  how  can  IT  administrators  make 
root-cause  analysis  more  efficient? 

The  answer  lies  in  the  hottest  tech¬ 
nology  in  the  IT  world  today:  full-text 
indexed  Boolean  search.  This  technol¬ 
ogy  is  used  by  all  search  engines,  in¬ 
cluding  Google,  Yahoo  and  MSN,  to 
quickly  return  the  desired  results  to 
users  in  seconds.  By  applying  full-text 
indexing  to  all  log  data,  IT  administra¬ 
tors  can  reap  the  same  benefit. 

Indexing  log  data  means  breaking 
each  of  the  log  entries  into  tokens,  or 
words.  The  location  of  each  token  is 
stored  in  a  special  dictionary  called  an 
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index  File.  The  creation  of  this  index 
file  doesn’t  affect  the  integrity  of  the 
original  logs,  which  is  a  critical  re¬ 
quirement  for  regulatory  compliance. 
Special  care  also  has  to  be  applied  to 
ensure  that  all  time  stamps  of  tokens 
are  remembered  so  searches  can  be 
optimized. 

Once  this  index  file  is  created,  IT 
administrators  can  then  instantly  lo¬ 
cate  the  desired  logs  through  Boolean 
searches.  Such  a  search  can  consist 
of  a  single  word  or  multiple  words. 
These  words  can  be  connected  using 
special  Boolean  operators  such  as 
AND,  OR,  NOT  and  parentheses.  Wild 
cards  such  as  can  also  be  applied 
to  these  words. 

For  example,  to  locate  logs  that 
match  the  earlier  criteria,  the  IT  ad¬ 
ministrator  would  simply  create  a 
Boolean  search  expression  like  “(login 
OR  logon)  AND  NOT  (root  OR  zhen¬ 
jl).”  IT  admins  can  further  restrict  the 
result  set  by  simply  adding  new  condi¬ 
tions  using  Boolean  operators.  By 
adding  a  time  frame  to  the  search, 
the  log  search  engine  will  also  jump 
to  the  desired  time  without  searching 
through  all  the  unnecessary  logs. 

Unlike  the  Web  search  engines, 
where  index  files  are  updated  only  pe¬ 
riodically,  the  log  search  engines  can 
index  data  in  real  time,  usually  tens  of 
thousands  of  log  messages  per  second. 
This  real-time  component  gives  IT  ad¬ 
ministrators  the  fastest  way  to  locate 
what  they  need. 

Search  technology  has  been  applied 
in  many  ways,  including  Web  search 
and  desktop  search.  Applying  it  to  the 
vast  ocean  of  infrastructure  log  data 
will  no  doubt  make  root-cause  and 
forensic  analysis  much  easier  for  IT 
administrators.  O  57894 


WANT  OUR  OPINION? 
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YOUR  JOB  IS  TO  KEEP  SYSTEMS  AND  APPLICATIONS  RUNNING. 
OUR  MISSION  IS  TO  KEEP  PEOPLE  AND  INFORMATION  CONNECTED. 

LET’S  WORK  TOGETHER. 


Continuous  access  to  information  no  matter  what.  That’s 
Information  Availability.  It’s  what  your  employees,  suppliers  and 
customers  demand  every  minute  of  every  day.  But  to  deliver  it 
flawlessly,  you  need  a  massive  global  infrastructure,  redundant 
systems  and  diverse  networks  being  monitored  and  supported 
by  skilled  technical  experts  at  secure  facilities.  That’s  exactly 
what  SunGard  provides. 

As  a  result,  we  can  offer  you  a  higher  level  of  availability  and 
save  your  company,  on  average,  25%  versus  building  the 
infrastructure  yourself.  Plus,  it’s  a  vendor  neutral  solution  that 
lets  you  control  your  data, applications  and  network  while  giving 
you  the  flexibility  to  adjust  to  the  changing  needs  of  your 
business.  But  best  of  all,  it  lets  you  spend  more  time  solving 
business  problems  and  iess  time  solving  technical  problems. 


For  years,  companies  around  the  world  have  turned  to 
SunGard  to  restore  their  systems  when  something  went 
wrong.  So,  it’s  not  surprising  that  they’re  now  turning  to  us 
to  mitigate  risk  and  make  sure  they  never  go  down  in  the 
first  place. 


You  want  your  network  and  systems  to  always  be  up  and 
running.  We  want  the  same  thing.  Let's  get  together.  To 
learn  more,  visit  www.availability.sungard.com  or  call 
1-800-468-7483. 


SUNGARD 

Availability  Services 


Keeping  People 
and  Information 
Connected 1™ 


‘Potential  savings  based  on  IDC  White  Paper,  Ensuring  Information  Availability: 
Aligning  Customer  Needs  with  an  Optimal  Investment  Strategy. 


Business  Intelligence  made  a  promise:  to  make  it  simple  for  everyone  to  use  information  to  make 
better  decisions.  But,  given  your  complex  IT  infrastructure,  the  reality  of  getting  a  single  BI  standard 
in  place  across  the  company  has  been  anything  but  simple.  Until  now. 

Introducing  Cognos  8  Business  Intelligence,  the  one  solution  built  to  break  down  the  barriers  limiting 
;>Fs  potential.  With  a  complete  Web  Services-based  SOA.  A  simple  browser-based  interface.  A  full  range 
of  Bl  capabilities  —  reporting,  analysis,  scorecarding,  dashboarding  and  more  —  all  in  a  single  product 
and  on  a  single  architecture.  And  the  BI  foundation  for  companies  demanding  a  simpler  path  to  a  complete 

performance  management  system. 

It’s  everything  BI  promised  to  be.  And  now,  it’s  here. 

To  learn  more  and  to  find  out  where  you  can  preview  Cognos  8,  go  to  cognos.com/simple 


THE  NEXT  LEVEL  OF  PERFORMANCE 


Double  Dipping  on  Sarb-Ox 

No  doubt  about  it:  Sarbanes-Oxley 
compliance  can  be  pricey.  But  with 
creativity  and  foresight,  some  companies 
are  getting  a  lot  more  out  of  their 
compliance  budgets.  Page  42 


Career  Watch 

A  young  mainframer  sees  infinite 
opportunities;  the  loss  of  tech  jobs 
continues;  and  why  women  pursue 
careers  in  IT.  Page  46 


OPINION 

You’re  Fired! 

Firing  a  subordinate  can  be  emotionally 
debilitating  to  a  manager,  but  Paul  Glen 
tells  how  you  can  minimize  the  angst. 

Page  48 


Today’s  hottest  global 
markets  are  steeped  in 
counterfeit  IT  products. 
Here’s  howto  minimize 
your  company’s  exposure. 


BY  MARY 
K.  PRATT 


r  dward  macnamara  was  impressed 
with  the  local  company  he  had  hired  to 
help  open  a  new  office  in  Beijing.  The 
vendor  had  offered  to  install  a  suite  of 
Microsoft  products  on  the  computers 
bright  away. 

But  Macnamara’s  favorable  view  quickly  turned 
with  the  vendor’s  follow-up  question:  “Do  you 
want  Microsoft  today,  or  do  you  want  to  wait  for 
the  real  thing?” 

As  chief  technology  officer  at  Wilmer  Cutler 
Pickering  Hale  and  Dorr  LLP,  a  law  firm  based  in 

■  ■  Boston  and  Washington,  Mac¬ 
namara  had  been  warned  about 
software  piracy.  Still,  he  says,  he 
was  surprised  by  the  vendor’s 
brazen  behavior. 

■  ■  Experts  aren’t  so  shocked, 
though.  They  point  to  statistics  that  show  ram¬ 
pant  use  of  pirated  software  and  counterfeit  hard¬ 
ware  in  the  LT.S.  as  well  as  overseas.  The  problem 
is  on  the  rise,  as  U.S.  companies  expand  opera¬ 
tions  into  countries  where  illegal  use  of  IT  prod¬ 
ucts  is  widespread  and  enforcement  of  intellectu¬ 
al  property  laws  is  minimal. 

For  example,  New  York-based  audit,  tax  and 
advisory  firm  KPMG  LLP  and  the  Fremont,  Calif.- 
based  Alliance  for  Gray  Market  and  Counterfeit 
Abatement  (AGMA)  recently  reported  that  as 
much  as  10%  of  all  high-tech  products  sold  glob¬ 
ally  is  counterfeit.  And  the  Business  Software 
Alliance  (BSA)  estimates  that  one-third  of  the 
software  in  use  worldwide  is  pirated.  The  Wash¬ 
ington-based  organization  also  says  that  while 
the  U.S.  has  the  lowest  piracy  rate  of  any  country, 
it’s  still  a  disappointing  21%. 

To  complicate  matters,  some  of  the  hottest 
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spots  in  the  global  marketplace  are  the 
worst  offenders. 

For  example,  in  China,  90%  of  soft¬ 
ware  installed  on  computers  is  pirated, 
according  to  the  second  annual  survey 
on  piracy  conducted  last  year  by  the 
BSA  and  market  research  firm  IDC. 
Only  Vietnam  and  Ukraine  had  higher 
piracy  rates,  at  92%  and  91%,  respec¬ 
tively,  and  more  than  a  dozen  other 
countries  had  rates  of  80%  or  higher. 

Cultural  Challenge 

According  to  AGMA  and  KPMG,  Chi¬ 
na  is  among  the  countries  where  coun¬ 
terfeiting  IT  products  has  become  a 
cultural  norm.  Their  report  says  that 
“China  attracts  a  huge  influx  of  foreign 
direct  investment  resulting  in  high 
technology  capability  with  adopted 
know-how,  accessible  distribution  in 
densely  populated  areas  and  inconsis¬ 
tent  regulatory  enforcement.” 

Those  factors  —  coupled  with 
low  wages,  high  unemployment  and 
a  largely  uneducated  workforce  — 
create  a  favorable  setting  for  counter¬ 
feiting,  the  report  says. 

The  result:  In  countries  like  China, 
“the  likelihood  of  buying  counterfeit 
products  is  higher  —  and  it  might  be 
more  acceptable,”  says 
Gary  Matuszak,  global  in¬ 
dustry  leader  for  electron¬ 
ics,  software  and  services 
at  KPMG. 

That’s  particularly  true 
for  companies  that  employ 
local  workers  in  their  for¬ 
eign  offices,  says  Avi  Barir, 
vice  president  of  software 
digital  rights  management 
at  Aladdin  Knowledge  Sys¬ 
tems  Ltd.  in  Israel. 

“The  cultures  in  these 
countries  are  such  that  lo¬ 
cal  employees  in  [foreign 
offices  of]  U.S.  companies 
would  act  the  same  as  em¬ 
ployees  in  local  compa¬ 
nies,”  says  Barir,  whose 
company  makes  products 
to  help  manufacturers  pre¬ 
vent  illegal  use  of  their 
software. 

That  means  your  Chi¬ 
nese  workforce  may  not  be 
culturally  attuned  to  the 
fact  that  counterfeiting  is 
not  acceptable.  But  it’s  es¬ 
sential  that  your  employees 
here  and  abroad  take  the 
issue  very  seriously,  for 
financial  as  well  as  ethical 
reasons. 

Counterfeiting  isn’t  just 
about  losing  a  few  bucks  on 
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bad  software  or  hardware.  Counterfeit 
and  pirated  products  expose  compa¬ 
nies  to  worms,  viruses  and  system  fail¬ 
ures,  as  well  as  potential  lawsuits  for 
copyright  and  patent  infringements. 

Hard  to  Spot 

Aside  from  software,  the  products  tar¬ 
geted  by  counterfeiters  are  often  low- 
cost  items  that  companies  buy  in  high 
numbers,  such  as  servers,  laptops,  cell 
phones,  monitors,  hard  drives  and  net¬ 
work  interface  cards. 

Counterfeiters  often  reverse- 
engineer  the  items,  slap  on  fake  logos 
and  ship  them  out.  Sometimes  the 
quality  is  poor,  but  the  doctored  ver¬ 
sions  can  often  fool  even  tech  folks. 

Still,  industry  leaders  agree  that  the 
problem  could  be  kept  in  check  if  glob¬ 
al  companies  put  more  controls  in 
place  to  ensure  that  they  and  their 
international  counterparts  don’t  buy 
fakes.  They  say  relatively  simple  mea¬ 
sures  could  significantly  reduce  the 
volume  of  illegal  IT  products  used  in 
U.S.  companies  and  abroad. 

“Certainly,  there  are  things  CIOs  can 
watch  out  for  to  mitigate,  if  not  pre¬ 
vent,  the  purchase  of  counterfeit  prod¬ 
ucts,”  says  Matuszak. 

Here  are  some  simple 
procedures  that  can  lower 
your  risk  of  buying  coun¬ 
terfeit  IT  products. 

Educate  your  workforce 
about  the  problem.  CIOs  need 
to  instruct  anyone  autho¬ 
rized  to  buy  IT  equipment 
and  supplies  about  how  to 
avoid  buying  counterfeits. 

Establish  rules  for  purchas¬ 
ing  hardware  and  software. 

For  example,  Matuszak 
says,  decree  that  all  cell 
phone  purchases  be  made 
through  the  purchasing 
office  by  someone  who 
knows  how  to  guarantee 
that  the  product  is  legiti¬ 
mate. 

Don’t  trust  unknown  ven¬ 
dors.  Christian  Lau,  assis¬ 
tant  vice  president  of  IT  at 
Franchise  Services  Inc.  in 
Mission  Viejo,  Calif.,  the 
parent  company  of  several 
franchise  brands,  buys  only 
from  an  established  retailer 
or  directly  from  the  manu¬ 
facturers.  And  the  com¬ 
pany  doesn’t  allow  anyone 
outside  the  IT  department 
to  install  software. 

“Where  you’re  getting 
into  trouble  is  when  you 
try  to  go  through  [un- 


have  varying  degrees  of 
knowledge  on  the  topic  of  cou nterfeiting. 
“My  general  feeling  is  it’s  not  as  high  on 
people’s  agendas  as  it  should  be,”  says  Ed 
Trainor,  senior  vice  president  of  information 
systems  at  Paramount  Pictures. 

Officials  at  the  Business  Software  Al¬ 
liance  say  that  companies  contribute  to  the 
problem  by  either  knowingly  installing  more 
copies  of  software  than  licenses  allow  or 
unwittingly  buying  pirated  versions, 

Randall  Palm,  now  chief  technology  and 
information  security  director  of  CompTIA. 
says  he  discovered  two  illegal  copies  of 
Microsoft  Windows  during  a  software  audit 
in  1998  when  he  worked  for  an  IT  rental 
company. 

“The  packaging,  the  printing,  the  sub¬ 
tleties  of  the  printing,  the  hologram  sticker, 
the  coloring  -  it  was  all  a  perfect  match,"  he 
says,  adding  that  he  spotted  the  pirated 
copies  when  he  noticed  that  they  had  iden¬ 
tical  serial  numbers. 

The  mistake  cost  the  company  only  the 
$100  it  had  paid  lor  each  illicit  copy,  but 
others  have  lost  much  more. 


Nick  Tidd,  president  of  the  Alliance  for 
Gray  Market  and  Counterfeit  Abatement, 
tells  of  a  government  organization  that 
bought  multiple  networking  products  worth 
$500  each  but  'learned  that  they  wore 
counterfeit  when  the  products  needed 
repairs, 

“A  lot  of  folks  have  the  misconception 
that  because  it’s  technology,  it’s  not  prone 
to  counterfeiting  because  of  the  complexity 
of  the  products,”  Tidd  says. 

Another  company  paid  $300,000  for  a 
server  system  that  would  have  normally 
cost  $400,000,  says  Marta  Briscoe,  a 
lawyer  in  the  brand  protection  group  at 
Hewlett-Packard  Co.  and  secretary  of 
AGMA.  When  the  system  arrived  without 
the  proper  software  licenses,  cables  or 
manuals,  company  officials  realized  that 
some  of  its  components  were  counterfeit. 

Briscoe  wouldn’t  name  the  organization, 
but  she  says  if  was  a  large  ITS.  company. 

“Should  they  have  known  better?”  she 
asks.  "That’s  hard  to  say.  that’s  part  of  this 
whole  awareness  campaign." 

~  Maty  K  Pratt 


known]  resellers,  or  you  buy  on  the 
used  market  or  the  international  mar¬ 
ket,  where  you  don’t  know  the  source,” 
says  Steve  Bandrowczak,  CIO  at  Leno¬ 
vo  Group  Ltd.  in  Purchase,  N.Y. 

Be  suspicious  of  highly  discounted  prod¬ 
ucts.  “A  good  price  from  someone  you 
never  heard  of  is  probably  a  tip-off,” 
says  Nick  Tidd,  president  of  AGMA 
and  vice  president  of  sales  and  busi¬ 
ness  compliance  at  3Com  Corp.  in 
Marlboro,  Mass. 

Don’t  pass  up  a  good  deal  out  of  fear, 
though.  Tidd  and  others  say  there  are 
companies  —  some  of  which  might  not 
be  authorized  dealers  —  that  sell  legit¬ 
imate  products  at  steep  discounts. 

“You  can  always  call  on  the  serial 
number  and  see  if  you’re  getting  some¬ 
thing  legit,”  says  Randall  Palm,  chief 
technology  and  information  security 
director  at  the  Computing  Technology 
Industry  Association  Inc.  (CompTIA) 
in  Oakbrook  Terrace,  Ill.  “Trust,  but 
verify.” 

Don’t  be  fooled  by  the  presence  of  Web 
sites,  business  cards  and  other  professional 
representations.  Experts  say  that  gray- 
market  dealers  often  have  all  the  trap¬ 
pings  of  legitimacy  to  allay  customers’ 
suspicions. 

Ensure  that  domestic  purchasing  poli¬ 
cies  are  followed  in  overseas  offices.  “I 

wouldn’t  go  as  far  as  saying  everything 
has  to  be  controlled  centrally  by  pur¬ 
chasing  only  in  the  U.S.,  but  you  need 
to  educate  and  follow  through  to  make 


sure  the  China-based  buyer  is  buying 
from  an  authorized  [vendor  or  manu¬ 
facturer],”  Matuszak  says. 

Bundle  counterfeiting  with  other  security 
issues.  “If  you’re  a  CIO,  you  should 
have  an  information  security/cyber¬ 
crime  policy  in  effect,”  says  Frank 
Taney,  chairman  of  the  IT  litigation 
practice  group  at  Buchanan  Ingersoll 
PC,  a  law  firm  in  Philadelphia. 

Foster  a  culture  where  counterfeiting 
and  piracy  of  any  kind  is  not  tolerated. 
Paramount  Pictures  Corp.,  for  exam¬ 
ple,  requires  managers  to  attend  an 
annual  meeting  addressing  business 
and  ethical  practices  and  to  sign  a 
business  conduct  statement  each 
year,  says  Ed  Trainor,  senior  vice  pres¬ 
ident  of  information  systems  at  the  Los 
Angeles-based  company  and  former 
president  of  the  Society  for  Informa¬ 
tion  Management.  Policies  against 
copyright  infringement  and  illegal 
copying  of  materials  are  among  the 
subjects  covered. 

There’s  nothing  new  about  counter¬ 
feiting,  Taney  says,  “but  it  is  news  to  a 
lot  of  companies  that  this  is  a  serious 
issue  that  they  have  to  manage.” 

With  counterfeit  goods,  even  cheap 
ones,  he  says,  “you’re  really  not  getting 
the  value  you  think  for  your  procure¬ 
ment  dollars.”  ©  57675 


Pratt  is  a  Computerworld  contributing 
writer  in  Waltham,  Mass.  Contact  her  at 
marykpratt@verizon.net. 
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Reduce  compliance  risk  and  email  storage  requirements  with  automated  email  management. 

Email  gives  you  35  billion  reasons  every  business  day  to  find  a  better  way  to  manage  it.  Email  must  meet  the 
same  rigorous  compliance  mandates  as  other  corporate  documents.  Inadequate  storage,  human  error,  and 
inconsistent  policy  enforcement  put  you  at  risk.  FileNet  Email  Manager  with  exclusive  ZeroClick  technology 
automates  your  entire  email  management  lifecycle  -  minimizing  human  interaction,  improving  productivity  and 
mitigating  storage  needs.  It's  much  more  than  an  archival  solution.  Together  with  FileNet  Records  Manager, 
email  can  now  be  fully  managed  without  user  interaction  or  costly  infrastructure.  The  leading  choice  of  global 
enterprises,  you  won't  find  a  better  email  management  solution  anywhere.  (We  know  your  employees  can't.) 
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Mention  the  Sarbanes- 
Oxley  Act  to  a  CIO  or 
a  corporate  executive, 
and  he’s  likely  to  roll 
his  eyes  or  grimace. 
That’s  because  most  executives  view 
the  compliance  requirements  as  a  grim 
burden,  like  cleaning  out  a  pack  rat’s 
basement. 

Large  public  companies  have  had  to 
devote  thousands  of  staff  hours  and  in¬ 
vest  millions  of  dollars  to  identify,  doc¬ 
ument  and  audit  internal  controls 
within  their  organizations  just  to  com¬ 
ply  with  Section  404  of  the  federal 
law.  Often  the  result  has  been  that 
other  strategic  initiatives  and  revenue¬ 
enhancing  IT  projects  had  to  be  put 
on  the  back  burner. 

Those  pressures  have  continued 
unabated  in  2005.  U.S.  companies  are 
expected  to  spend  nearly  $15.5  billion 
on  compliance-related  activities  this 
year,  with  technology  spending  on 
Sarbanes-Oxley  alone  expected  to  top 
$1.7  billion,  according  to  Boston-based 
AMR  Research  Inc. 

Mindful  of  these  investments,  some 
savvy  companies  have  leveraged  their 
Sarbanes-Oxley  spending  to  benefit 
the  business  in  ways  that  go  beyond 
mere  regulatory  compliance,  yielding 
more  bang  for  the  buck. 

Northbrook,  Ill.-based  Allstate  In¬ 
surance  Co.,  for  example,  has  adopted 
a  holistic  view  of  regulatory  compli¬ 
ance,  including  steps  it  has  taken  to 
address  the  requirements  of  Sarbanes- 
Oxley,  the  Gramm-Leach-Bliley  Act 
and  the  Health  Insurance  Portability 
and  Accountability  Act,  says  Kim 
Van  Nostern,  Allstate’s  chief  informa¬ 
tion  security  officer.  “We  recognize 
that  all  those  regulations  require  the 
same  types  of  controls;  they  just  apply 


a  slightly  different  filter,”  says  Van 
Nostern. 

Two  years  ago,  Allstate  developed 
its  own  compliance  and  control  man¬ 
agement  system  to  help  document 
controls  in  its  various  IT  divisions. 

One  of  those  tools  is  a  scanning  system 
created  last  year  to  identify  worms  and 
viruses  and  prevent  them  from  attack¬ 
ing  any  of  Allstate’s  systems. 

Beyond  helping  Allstate  ensure  that 
it  has  effective  security  controls  in  or¬ 
der  to  comply  with  Sarbanes-Oxley, 
the  scanning  tool  has  delivered  a  nice 
side  benefit.  It  enables  the  company’s 
asset  management  specialists  to  con¬ 
stantly  survey  Allstate’s  corporate 
network  and  identify  and  track  PCs, 
servers  and  other  pieces  of  equipment 
that  they  previously  didn’t  have  a 
record  of,  says  Van  Nostern. 

Catching  Exceptions 

At  the  end  of  2004,  American  Electric 
Power  Co.  (AEP)  began  using  software 
from  Oversight  Systems  Inc.  in  Atlanta 
to  help  it  monitor  transactions  in  its 
accounts  payable  group.  If  a  manager 
authorizes  a  purchase  above  his  spend¬ 
ing  limit,  the  system  recognizes  it  and 
spits  out  an  exception  report,  says 
Mike  Sullivan,  assistant  controller 
at  the  Columbus,  Ohio-based  power 
company. 

Those  capabilities  have  helped  AEP 
comply  with  Section  404  require¬ 
ments.  But  the  company  has  also  been 
able  to  use  the  software  to  determine 
whether  any  of  its  IT  staffers  or  other 
workers  have  tried  to  modify  software 
fields  in  other  transaction  systems  for 
fraudulent  purposes,  says  Sullivan. 

The  company  plans  to  extend  the 
use  of  the  software  to  its  accounts 

Continued  on  page  44 


Some  companies  are  leveraging  Sarbanes-Oxiey  investments  for  business; 
others  are  leveraging  business  investments  to  comply.  By  Thomas  Hoffman 
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We  recognize 
that  all  those 
regulations 
require  the  same 
types  of  controls; 
they  just  apply 
a  slightly 
different  filter. 

KIM  VAN  NOSTERN,  CHIEF 
INFORMATION  SECURITY  OFFICER, 
ALLSTATE  INSURANCE 

Continued  from  page  42 
receivable  department  by  year’s  end. 
“We  should  see  some  operational  sav¬ 
ings  once  we  go  through  another  [Sec¬ 
tion  404]  cycle,”  Sullivan  says,  because 
AEP  will  be  able  to  cut  back  on  some 
of  its  internal  controls  testing. 

In  late  2000,  San  Ramon,  Calif.- 
based  Chevron  Corp.  purchased  Price- 
aterhouseCoopers’  Enterprise  Secu¬ 
rity  Architecture  System  (ESAS)  to 
help  it  document  its  information  secu¬ 
rity  strategies.  Since  then,  the  software, 
which  has  been  acquired  by  McLean, 
Va.-based  Brabeion  Inc.,  has  helped 
Chevron  develop  a  central  repository 
for  ail  of  its  security  policies  and  con¬ 
trols,  says  Jay  White,  global  informa¬ 
tion  protection  architect  at  Chevron. 

“We  were  fortunate  in  having  ESAS 
in  place  before  Sarbanes-Oxley  went 
into  effect,”  says  White.  “We  discov¬ 
ered  that  if  you’re  ESAS-compliant, 
you’re  Sarbanes-Oxley-compliant.” 

fhe  software,  which  Chevron  runs 
on  Windows  2000  supported  by  an 


Oracle  database,  has  provided  the 
energy  company  with  multiple  bene¬ 
fits  beyond  documenting  its  security 
controls  to  comply  with  Section  404. 
ESAS,  says  White,  “is  like  an  instruc¬ 
tion  manual  we’ve  been  able  to  use  to 
formulate  our  information  security 
strategy.” 

Streamlining  Audits 

In  2002,  Regions  Financial  Corp.  pur¬ 
chased  AutoAudit,  an  automated  au¬ 
diting  tool  from  Cokato,  Minn.-based 
Paisley  Consulting  Inc.  The  Birming¬ 
ham,  Ala.-based  financial  services 
firm  has  been  using  the  software  to 
help  its  mortgage  division  capture  and 
document  all  bills  and  invoices  that 
might  be  needed  for  quality  control 
audits,  says  senior  audit  manager 
Kevin  Sullivan. 

Regions  has  also  customized  the 
product  to  handle  quality  assurance 
reviews  for  its  information  security 
and  internal  audit  groups,  he  says. 
Since  then,  the  company  has  used 
AutoAudit  and  Paisley’s  RiskNavigator 
tools  to  help  its  officers  certify  that 
controls  are  in  place  to  support  various 
business  processes  as  part  of  its  Sar¬ 
banes-Oxley  compliance  efforts.  But 
the  tools  have  yielded  other  wide- 
ranging  benefits,  says  Sullivan. 

For  instance,  before  the  financial 
services  company  began  using  the 
AutoAudit  system,  each  of  its  13  inter¬ 
nal  audit  groups  —  which  monitor  its 
trust,  mortgage  and  other  business 
units  —  had  to  create  a  new  database 
in  Lotus  Notes  prior  to  conducting  an 
audit.  Since  Regions  conducts  between 
200  and  300  internal  audits  per  year, 
“we  had  all  these  different  databases 
out  there  for  administrative  purposes,” 
says  Sullivan. 

The  company  used  the  AutoAudit 
tool  to  consolidate  those  databases 
into  a  single  system,  thus  generating 
efficiency  gains  for  its  internal  audit 
department,  he  says.  Sullivan  says  that 
the  system  has  freed  up  auditors  to  do 
audits  instead  of  devoting  time  to  man¬ 
aging  the  hundreds  of  databases  that 
were  once  in  use. 

Looking  ahead,  Regions  hopes  to  use 
RiskNavigator  to  help  it  automate  con¬ 
trols  assessments  in  its  burgeoning  en¬ 
terprise  risk  management  activities. 

No  doubt  about  it:  Sarbanes-Oxley 
compliance  can  be  pricey.  But  with 
creativity  and  foresight,  some  compa¬ 
nies  are  getting  a  lot  more  out  of  their 
compliance  budgets.  ©  57668 


While  some  companies  have  double  dipped  on  Sarbanes-Oxley  com¬ 
pliance  efforts  to  squeeze  out  additional  business  benefits,  others 
have  taken  the  opposite  route:  leveraging  previous  or  unrelated  soft¬ 
ware  investments  to  address  Section  404. 


Fairchild  Semiconductor 

In  August,  Fairchild  Semiconductor  International  Inc.  installed  software  from 
MetricStream  Inc.  to  help  it  streamline  and  improve  its  quality-related  business  proc¬ 
esses.  Fairchild  has  operations  and  plants  around  the  world,  from  Malaysia  to  Germany, 
and  it  wanted  to  ensure  commonality  among  the  business  processes  in  place  at  its  various 
locations.  For  example,  it  was  looking  for  a  standard  way  of  handling  customer  returns  from 
a  quality  control  standpoint,  says  Mark  Rioux,  vice  president  of  global  quality  and  reliability 
at  the  South  Portland,  Maine-based  company. 

The  Web-based  software  should  help  Fairchild  reduce  the  time  required  for  customer 
transactions,  in  part  by  handling  customer  requirements  more  efficiently.  But  a  byproduct 
of  the  software  is  that  it's  providing  the  company  with  auditable  quality  controls  that  will 
help  it  achieve  Section  404  compliance,  says  Rioux. 

“When  we  make  a  process  change  within  our  technology,  the  software  allows  us  to  de¬ 
tail  what  change  is  occurring,  what  product  is  going  to  be  affected  and  when  the  change  is 
expected  to  occur,”  he  adds. 


Vintage  Petroleum 

Vintage  Petroleum  Inc.  in  Tulsa,  Okla.,  began  using  Open  Text  Corp.’s  LiveLink 
software  in  its  accounts  payable  department  in  2001  to  scan  and  track  invoices  that  might 
otherwise  get  buried  under  the  paperwork  for  the  company’s  engineers,  says  Carrie  Daigle, 
a  network  analyst  at  the  independent  oil  and  gas  company. 

But  LiveLink,  which  runs  on  one  of  the  company’s  Windows  2000  servers,  also  pro¬ 
vides  an  audit  trail  for  the  accounting  department  to  show  when  a  payment  for  an  invoice 
has  been  approved  and  by  whom.  That’s  the  kind  of  control  that  external  auditors  look  for 
companies  to  demonstrate  as  part  of  their  Section  404  compliance  activities. 


American  Standard  Cos. 

In  June  2004,  American  Standard  Cos.  in  Piscataway,  N.J.,  installed  a  system  called 
the  SAP  Compliance  Calibrator  from  Virsa  Systems  Inc.  in  Fremont,  Calif. 

The  software  was  intended  to  ensure  that  the  5,000-plus  global  users  of  the  company’s 
SAP  ERP  system  had  appropriate  segregation  of  duties,  says  Johann  Erasmus,  manager  of 
quality  and  process  improvement  for  American  Standard’s  internal  audit  team.  The  soft¬ 
ware  enables  employees  who  use  the  SAP  system  to  access  only  those  functions  that  are 
pertinent  to  their  roles,  says  Erasmus.  “It  makes  the  process  a  lot  less  risky,”  he  says. 

But  the  system  also  helps  the  plumbing  fixture  and  faucet  manufacturer  comply  with 
Sarbanes-Oxley  because  it  puts  effective  security  controls  in  place  for  its  financial  and 
transaction  systems. 

-  Thomas  Hoffman 
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Vrek  Smoot/. 


1 1  Mg  A  There's  a  widely 
W 1 IXfl  documented  skills 
shortage  coming 
to  the  mainframe  world,  as  baby 
boomers  begin  to  retire  and  young 
programmers  focus  on  other  ar¬ 
eas.  Smootz,  25,  is  a  recent  grad¬ 
uate  who  has  realized  that  the 
mainframe  world  is  likely  to  offer 
lots  of  opportunity  and  very  little 
competition.  He  spoke  with  con¬ 
tributing  editor  Jamie  Eckle. 


TITLE:  Software 
quality  assurance 
engineer 

COMPANY:  BMC 

Software  Inc., 
Houston 


Were  you  the  odd  man  out  in  your  Texas 
State  University  class,  entering  the 
world  of  mainframe  computing?  Definite¬ 
ly.  While  at  Texas  State,  I  never  met  anyone 
who  considered  the  mainframe  to  be  a  viable 
platform  on  which  to  build  a  career,  much  less 
anyone  making  the  concerted  effort  to  work 
with  mainframes.  Open-source,  a.k.a.  Linux, 
was  what  the  majority  of  computer  science 
students  were  moving  toward,  but  they  as¬ 
sumed  they  would  work  on  Windows. 

When  talking  with  friends  from  college 
about  mainframe  development  at  BMC,  I  al¬ 
ways  hear  surprise  that  development  is  still 
occurring  and  that  I  am  willing  to  work  in  a 
“doomed  field."  The  emphasis  in  school  is 
on  new  trends.  I  suspect  that,  since  students 
never  work  with  or  research  mainframes,  it 
creates  the  incorrect  assumption  that  they  are 
a  thing  of  the  past. 


When  did  you  decide  to  head  in  that 
direction?  I’m  lucky  to  be  a  second-genera¬ 
tion  programmer,  and  as  I  was  looking  for 
internships  during  my  sophomore  year,  my 
mother  heard  from  a  former  co-worker  that 
BMC  had  created  a  mainframe  internship  pro¬ 
gram.  The  following  two  summers,  I  worked 
as  a  QA  intern  on  the  Recovery  Manager  solu¬ 
tion.  Those  experiences  demonstrated  the 
dynamic  nature  of  the  mainframe. 

Did  the  program  at  Texas  State  ade¬ 
quately  prepare  you  for  mainframe  pro¬ 
gramming?  Most  of  our  development  is 
actually  done  in  Windows,  and  we  use  a  build 
process  that  makes  it  easy  to  port  over  to  the 
mainframe.  Since  my  education  focused  on 
C/C++,  I  was  prepared  in  that  sense.  On  the 
other  hand,  I’ve  never  encountered  anything 
like  the  mainframe  [user  interface].  When 
you’re  first  getting  into  the  mainframe,  you 
suddenly  need  to  understand  what  SDSF, 

TSO,  ISPF  and  JES  mean.  What  you  achieve 
on  a  PC  by  double-clicking  on  a  folder  involves 
typing  a  command  like  “dslist  ‘myid.thisdata.*’” 
on  a  command  line  on  the  mainframe.  Fortu¬ 
nately,  I  work  with  experienced  mainframe  de¬ 
velopers  who  can  help  with  all  tasks,  from 
complex  to  trivial. 

On  that  note,  one  aspect  of  my  mainframe 
career  that  is  particularly  appealing  is  that 
most  programmers  my  age  don’t  give  the 
mainframe  a  second  thought.  At  the  same 
time,  the  supply  of  experienced  mainframe 
programmers  is  going  to  diminish  rapidly  over 
the  next  couple  of  decades.  The  market  for 
mainframe  developers  could  resemble  that  for 
Cobol  programmers  just  before  Y2k.  Cobol 
had  been  on  the  way  out,  yet  programmers 
with  Cobol  experience  were  highly  sought 
after  during  the  late  ’90s.  The  mainframe  has 
been  “on  the  way  out"  for  years,  but  it  remains 
strong,  and  the  need  for  mainframe  develop- 
I  ers  is  even  stronger. 


Technology-sector  job  cuts  for 

the  first  three  quarters  of  the  year 
were  up  18.8%  over  the  same  pe¬ 
riod  in  2004,  according  to  Challenger, 
Gray  &  Christmas  Inc.,  a  global  out¬ 
placement  company  in  Chicago. 

There  are  some  promising  indicators, 
according  to  Challenger.  The  number  of 


!  growth  occurred  in  the  professional  ser- 
;  vices  area,  where  employment  in  com- 
;  puter  systems  design  and  related  ser- 
I  vices  grew  by  about  30,000  since  Sep- 
i  tember  2004.  Management  and  techni- 
|  cal  consulting  service  firms  also  added 
|  about  29,000  jobs  during  that  period. 

-  ToddR.  Weiss 


cuts  announced  between  July  and  Sep¬ 
tember  was  24%  lower  than  the  54,701 
job  cuts  reported  during  the  same  peri¬ 
od  in  2004,  according  to  the  survey. 

But  unlike  other  U.S.  industries  that 
have  seen  cuts,  the  tech  segment  has 
lost  jobs  without  a  similar  rate  of  hiring 
to  offset  the  cuts,  John  Challenger,  CEO 
of  the  company,  said  in  a  statement. 

The  only  significant  tech-sector  job 


Gone  in  Three  Quarters 
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TECH-SECTOR  JOB  CUTS: 


FIRST  THREE 
QUARTERS 

OF  2005: 

RRST THREE 
QUARTERS 

OF  2004: 

140,696 

118,427 

Work/Life 

Balance 

Percentage  of  respondents  who  say  they 
are  satisfied  with  the  way  they  balance 
personal  and  workplace  demands. 

70%  employees 
78%  workers 

82%  employees 

BASE:  1,891  employees  nationwide 
SOURCE:  Rasmussen  Reports  LLC,  August  2005 


Number  of  CIOs  who  believe 
their  jobs  are  at  risk  because 
they  aren't  delivering  results 
fast  enough  to  satisfy 
company  leaders. 


SOURCE:  Gartner  Inc.  preconference  survey  of 
attendees  at  October’s  Gartner  Symposium/ITxpo 


Women  and  the 
Unexamined  IT  Life 


The  Collegiate  Times,  the  student 
newspaper  at  Virginia  Tech,  re¬ 
ports  that  three  scholars  at  the 
school  have  identified  five  factors 
that  influence  women  who  are 
interested  in  or  are  pursuing  ca¬ 
reers  in  IT.  The  article  says  study 
participants  had  certain  shared 
characteristics,  including  minori¬ 
ty  status  and  parents  —  especially 
mothers  —  who  supported  their 
career  choices.  The  National  Sci¬ 
ence  Foundation-funded  study 
(which  included  telephone  inter¬ 
views  with  and  surveys  of  1,026 
young  women  at  high  schools, 
universities  and  community  col¬ 
leges  across  Virginia)  found  that 


they  began  using  a  computer  at  an 
early  age  for  communication  and 
information  purposes,  not  usually 
to  play  computer  games  like  their 
male  peers,  and  have  a  positive 
view  of  IT  professionals  and  their 
careers.  They  don’t  think  about 
it  in  terms  of  being  a  “geek”  or 
“nerd,”  said  one  researcher.  Most 
interesting,  perhaps,  is  the  finding 
that  these  women  haven’t  dis¬ 
cussed  career  options  with  many 
others,  the  researcher  said.  In 
fact,  those  who  seek  more  infor¬ 
mation  tend  to  be  less  interested 
in  pursing  a  career  in  IT.  ©  57904 

Page  compiled  by  Jamie  Eckle. 


Innovations  by  InterSystems 


Messaging,  plus. . . 


Business  Process  Orchestration,  plus. . . 


Composite  Application  Development,  plus... 


Business  Activity  Monitoring 


Integrate  Your  Enterprise. 

Ensemble  Will  Get  You  To  The  Finish  Line  Faster. 

Ensemble’s  innovations  will  enable  you  to  successtiilly  integrate  your  enterprise  faster.  Much  faster. 

This  is  the  first  platform  to  offer  a  seamless  ensemble  of  integration  and  development  technologies 
for  every  type  of  integration  project.  Ensemble  s  universal  integration  platform  is  the  innovative 
fusion  of  an  integration  server,  data  server,  application  server,  and  portal  development  software. 

With  its  single  development  and  management  environment,  Ensemble  will  dramatically  reduce  your 
time-to-solution. 

We  back  these  claims  with  this  money-back  guarantee:  For  up  to  one  year  after  you  purchase 
Ensemble ,  if  you  are  unhappy  for  any  reason,  we’ll  refund  100%  of  your  license  fee.  We  are  InterSystems, 
a  global  software  company  with  a  track  record  of  innovation  for  more  than  25  years. 

InterSystems 

ENSEMBLE 

Request  a  FREE  proof-of-concept  project  at  www.InterSystems.com/Ensemblel3A 

•  Read  about  our  money-back  guarantee  at  the  web  page  shown  above. 

C  2005  InterSystems  Corporation.  All  rights  reserved.  InterSystems  Ensemble  is  a  registered  trademark  of  InterSystems  Corporation.10-05  Enslnnol3  CoWo 
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Outsourcing 

■  Nov.  10,  Chicago 

Sponsor:  The  Outsourcing  Institute 

Reality  Outsourcing:  Real  People,  Real 
Stories  includes  presentations  on 
adapting  to  change,  best  practices  in 
action,  postcontract  challenges,  out¬ 
sourcing  relationship  management, 
and  offshore  trials  and  tribulations. 
www.outsourcing.com/ 
roadshow2005/ 

Business 

Transformation 

«  Nov.  15-16,  Boston 
Sponsor:  Forrester  Research  Inc. 

Enabling  Business  Model  Transforma¬ 
tion:  IT s  Strategic  Role  in  Driving  Glob¬ 
al  Competitiveness  includes  tracks 
on  business  model  transformation  for 
global  competitiveness,  IT’s  business 
transformation  role  and  new  technol¬ 
ogy  architectures  to  support  business 
transformation.  It  also  covers  aligning 
IT  investments  for  growth,  developing 
IT  frameworks  to  support  global  ex¬ 
pansion,  retooling  the  IT  budget  to 
boost  innovation,  and  marketing  IT. 
www.forrester.com/esf2005 


Security 

*  Nov.  17-18,  New  York 
Sponsor  The  Conference  Board  Inc. 

The  2005  Corporate  Security,  Busi¬ 
ness  Continuity  and  Crisis  Manage¬ 
ment  Conference  will  address  topics 
such  as  corporate  crime  and  corrup¬ 
tion;  nuclear,  chemical  and  biological 
threats;  designs  to  link  IT  and  physical 
security;  homeland  security  and  the 
corporation;  natural  and  random  disas¬ 
ters;  and  strategic  communications. 
www.conference-board.org/ 
conferences 


Content 

Management 

e  Nov.  29-Dec.  1,  Boston 
Sponsor  Lighthouse  Seminars  LLC 

The  Gilbane  Conference  on  Content 
Management  Technologies  includes 
tracks  for  content  managers,  content 
technologists,  marketing  managers 
and  business  and  compliance  man¬ 
agers,  as  well  as  presentations  on 
strategic  issues. 

www.lighthouseseminars.com 


PAUL  GLEN 


WHILE  DONALD  TRUMP  may  issue 

these  words  with  mock  sadistic 
glee,  most  of  us  with  a  tad  of  com¬ 
passion  struggle  with  uttering  the 
phrase,  “You’re  fired.”  And  it’s 
right  that  we  should. 

In  the  popular  press,  when  we  hear  about  firings,  it’s 
usually  from  the  perspective  of  the  fired  person  rather 
than  the  boss.  The  person  doing  the  firing  is  variably 
portrayed  as  the  steely,  callous  automaton,  the  bad  guy 
or  sometimes  the  cruel,  sadistic,  power-hungry  heavy. 


In  truth,  most  bosses  are 
none  of  these  things.  They 
agonize  over  the  decision 
to  fire  someone,  and  even 
after  making  that  decision, 
they  suffer  bouts  of  guilt, 
depression,  sleeplessness 
and  fear.  The  whole  experi¬ 
ence  is  more  than  unpleas¬ 
ant  and  sometimes  even  de¬ 
bilitating  for  the  manager 
who  has  to  do  the  deed. 

But  bosses  get  no  sympa¬ 
thy  for  the  emotional  tur¬ 
moil  that  goes  with  the  job. 

When  it  comes  to  handling 
the  negative  personal  fall¬ 
out  of  firings,  you’re  on  your  own. 

In  my  time  as  a  manager,  I  discov¬ 
ered  that  the  better  prepared  I  was  for 
both  the  decision  to  fire  and  the  event 
itself,  the  more  comfortable  —  and 
less  emotional  —  I  was  with  what 
needed  to  be  done. 

Over  time,  I  developed  two  sets  of 
rules  that  helped  me  prevent  many 
of  the  unpleasant  feelings  about  firing 
someone. 

The  first  rules  governed  making 
the  decision  about  whether  to  fire,  and 
the  second  guided  how  to  fire.  I  found 
that  if  I  followed  these  rules,  I  felt 
comfortable  that  I  had  done  the  best 
that  I  could. 

(I’m  not  sure  whether  your  lawyers 


would  agree  with  all  of 
these,  but  I  rarely  had  the 
advice  of  lawyers  in  these 
situations.  These  rules  are 
strictly  for  peace  of  mind 
in  making  the  decision, 
not  necessarily  for  free¬ 
dom  from  wrongful-termi¬ 
nation  lawsuits.) 

Deciding  Whether  to  Fire 

1.  The  person  being  fired 
should  never  be  surprised 
by  what’s  happening  to 
him. 

2.  The  person  being 
fired  had  to  have  been 
given  explicit  warnings  prior  to 
being  fired. 

3.  The  person  being  fired  had  to 
have  been  advised  of  specific  steps 
he  needed  to  take  to  keep  his  job. 

4.  The  person  being  fired  had  to 
have  been  offered  support  to  help  him 
learn  what  he  needed  to  learn  to  keep 
his  job. 

5.  The  person  being  fired  had  to 
have  been  given  a  reasonable  period 
of  time  to  comply  with  your  expecta¬ 
tions.  The  nature  of  the  employee’s 
response  to  the  offer  of  help  could 
significantly  expand  or  contract 
what’s  considered  a  reasonable 
period  of  time. 

6.  Illegal  behavior  or  actions  open¬ 


paul  glen  helps  technical 
organizations  to  grow 
better  leaders  and  man¬ 
agers  to  perform  at  their 
best.  He  is  the  author  of 
the  award-winning  book 
Leading  Geeks.  Contact 
him  at  info@paulglen.com. 


ing  the  company  to  significant  legal 
risk  could  nullify  all  the  other  rules. 

If  someone  was  involved  in  illegal 
activities  related  to  work  or  actions 
that  could  be  considered  sexual  ha¬ 
rassment,  he  wouldn’t  deserve  the 
same  degree  of  help  and  warnings  that 
others  get. 

Carrying  Out  the  Decision  to  Fire 

1.  Never  delegate  the  dirty  work.  If  I  de¬ 
cided  to  fire  someone,  I  had  to  be  willing 
to  look  him  in  the  eye  and  tell  him  so. 

2.  The  meeting  should  be  face  to 
face.  No  phone,  fax,  e-mail  or  IM. 

3.  Keep  it  short.  The  meeting 
should  last  no  more  than  five  minutes. 
There’s  no  reason  to  drag  out 
something  that’s  so  painful  for 

the  employee. 

4.  Use  simple,  factual,  nonaccusato- 
ry  language.  “I’m  sorry  to  inform  you 
that  today  will  be  your  last  day  with  us 
at  XYZ  Corp.,”  instead  of,  “You  just 
aren’t  pulling  your  weight.” 

5.  Don’t  go  into  the  reasons  for  the 
dismissal.  Since  it  shouldn’t  be  a  sur¬ 
prise,  he  already  knows  what  the  prob¬ 
lem  is. 

6.  Don’t  answer  any  questions  about 
the  decision  or  the  performance  of  the 
person  being  fired.  The  time  for  that 
has  passed.  Your  answers  won’t  be 
heard  anyway.  Questions  about  the 
mechanics  of  exit  should  be  referred 
to  someone  else. 

7.  Have  another  person  handle  the 
details  of  the  exit.  The  last  thing  that 
the  fired  person  wants  is  to  spend  the 
next  half  an  hour  with  you  going  over 
the  minutiae  of  last  paychecks  and 
insurance. 

While  firing  staff  is  among  the  most 
unpleasant  things  that  a  manager  must 
do,  with  a  structured  approach,  the 
discomfort  for  everyone  involved  can 
be  minimized.  ©  57618 
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Calif  based  IT  co  has  openings 
at  its  Torrance,  CA  and  Chicago, 
IL  ofcs  and  at  unanticipated 
client  sites  across  the  US  for 
Software  Eng,  Progrrnmr.  Analysts, 
Project  Leader/Mgr.,  BizDvipmnt. 
Consultants  and  Biz  Analysts. 
Responsible  for  custom  program 
development  and  implementa¬ 
tion  and  system  analysis  and 
design.  Will  provide  software 
support  to  clients  that  includes 
testing,  debugging  and  modify¬ 
ing  software.  Bach  degree  req'd. 
Mail  resumes  to  RJT  Compuquest 
Inc.,  23430  Hawthorne  Blvd.,  #305, 
Torrance,  CA  90505,  Attn:  HR 


Sage  IT  seeks  Sr.  data  ware¬ 
housing  architect,  system  ana¬ 
lyst,  IT  manager  to  customize 
applications  using  Data  Marts 
Design/Modeling,  ERP,  Busin¬ 
ess  Objects,  Cognos,  Informatic, 
Oracle.  Travel  required.  Min.  MS 
in  computer  science  or  BS  1-5yr 
exp.  Contact  hr@saaeitinc.com. 
EOE. 

Corpus,  Inc.  has  multiple  open¬ 
ings  for  IT  professionals  to 
design  and  develop  applications 
using  Oracle,  SAP,  SQL,  PL/ 
SQL,  COBOL,  C/C++,  VB,  Java. 
XML,  ERP,  ASP,  NT,  XSL.  Min 
MS/BS  with  exp.  Travel  maybe 
required.  Please  send  resumes 
to  resumes@corpuslnc.com. 
EOE.  No  calls. 


Software  Engineer  -  Business 
Solutions.  Analyze  software  to 
det.  feasibility  of  design  for 
business,  technology  based 
solution.  Analyze  specific  in¬ 
put/output.  Tools:  JAVA,  Put¬ 
nam,  Function  Point  Metric 
System,  GUI,  UNIX  as  OS,  Ab 
Initio,  C/C++,  SQL,  Oracle. 
Req.  MCS  w/1  yr.  exp.  or 
Software  engineer  in  cost  es¬ 
timation  project.  Send  resume 
to  R.  Ilapavulur,  Mascon  Glo¬ 
bal,  1699  E.  Woodfield  Rd., 
#200,  Schaumburg,  IL  60173. 


EDS  is  looking  for  an  Informa¬ 
tion  Specialist  in  its  Seaside,  CA 
location  to  conceptualize,  de¬ 
sign,  construct,  test  and  imple¬ 
ment  business  and  technical 
information  technology  solutions 
through  application  of  software 
development  life  cycle  method¬ 
ology.  Requires  Bachelors  de¬ 
gree  in  Computer  Science  or 
Engineering  Technology  and 
one  (1)  year  of  experience  in  de¬ 
signing  and  building  web  appli¬ 
cations  using  Rational  Rose, 
J2EE,  EJB,  RMS  and  Oracle. 
Submit  resume  to  Pankaj  Patel, 
Product  Manager,  EDS,  400 
Gigling  Road,  Seaside,  CA 
93855,  m  reference  to  1115-J. 


Global  Tech  &  Resourc¬ 
es  seeks  Applications 
Software  Engr  to  re¬ 
view,  program  &  com¬ 
pile  apps.  BS  Comp 
Sci/Engr  or  academic 
Equiv  &  1  yr  exp  w / 
Microsoft  DNS,  WINS  & 
DHCP;  MCSE,  PMP, 
CCNA  &  CNA  certs 
req’d.  Resume:  701  E. 
Irving  Pk  Rd,  Ste  302, 
Roselle,  IL  60172. 


Systems  and  Operations  Spec¬ 
ialist,  Strategic  Sourcing  sought 
by  Novartis  Pharmaceuticals 
Corporation  for  East  Hanover, 
NJ  office.  Must  possess  Mas¬ 
ter's  degree  in  Business  Admin- 
istration/E-Business  and  1  year 
experience  in  eProcurement 
design  and  analysis  within  the 
pharmaceutical  industry.  Experi¬ 
ence  with  Ariba  Buyer,  Ariba 
elnvoicing,  Elance,  Emptoris, 
SAP  BW  and  SAP  R/3  systems 
required.  Respond  to:  Arlene 
O'Rourke,  Human  Resources 
Dept.,  Requisition  #34204,  One 
Health  Plaza,  B104/1G38,  East 
Hanover,  NJ  07936.  Novartis  is 
an  EOE  Employer. 


Software  Engineer.  Develop 
and  maintain  software  algo¬ 
rithms  for  Image  Analysis,  Pat¬ 
tern  Recognition,  Decision  Mak¬ 
ing  and  other  related  intelligent 
processes.  Perform  system 
level  object-oriented  program¬ 
ming  under  Microsoft  Windows 
XP  and  develop  application 
software  for  the  company's  X- 
ray  inspection  systems.  Require 
a  M  S.  in  computer  science  or  a 
related  field  plus  1  yr.  related 
exp.  Apply  to:  YesTech,  Inc., 
1317  Calles  Avanzado,  San 
Clemente,  CA  92673.  Attn: 
Owen  Sit. 


Computer  and  Information 
Systems  Manager  -  devel¬ 
op,  analyze,  enhance,  modi¬ 
fy,  implement  and  administer 
state  of  the  art  computer 
systems.  Train  in  use  and 
capability  of  computer  sys¬ 
tems.  Direct  system  support 
during  testing,  development 
and  operations.  Customize 
software  solutions  per  reqts 
of  business  clients.  Refer  to 
Job  #  CSI-01,  and  reply  to 
iobs@avocausa.com  or  mail 
to  Avoca  LLC,  555  Howard 
Street,  201,  SF,  CA  94105. 


EDL  Consulting, 
ltd  in  Wilmette,  IL 
seeks  Comergent 
software  engineer 
w /  M.S.  and  Co¬ 
mergent  certifica¬ 
tion.  Send  res: 
trrecruitment@ 

vahoo.com  or  fax 
802/609-7567. 


Director  of  Portland  Office 
sought  to  manage  and  devel¬ 
op  business  strategy.  Mas¬ 
ter's  degree  or  foreign  or  func¬ 
tional  equivalent  in  Computer 
Science,  Engineering  or  Bus¬ 
iness  related  field  and  mini¬ 
mum  1  yr.  experience  in  job 
offered  or  technical  consulting 
field.  Excellent  benefits  and 
salary  commensurate  with 
experience.  Send  resume  to: 
Recruitment  Coordinator,  Ref. 
Code  ORco,  4400  Campbells 
Run  Road,  Pgh.,  PA  15205; 
EEO/AAP/M/F/V/H. 


Computer:  Sr.  Developer  w / 
Masters  or  Foreign  equiv.  in 
Engg  Sci  or  Comp.  Sci  or  Math 
&  1  yr  exp.  to  design/dvlp  n-tier- 
ed  distributd  applicatns  intended 
for  multi  platfrm  browser  deliv. 
that  has  Java  applets  on  the 
client  side  (Java  Swing),  J2EE, 
componnts,  Struts  framework, 
MS  SQL  Server  &  Firebird  Ser¬ 
ver  on  the  servr  side.  Dvlp  data 
migratn  utilits  using  Java  &  CRM 
Tool  Hibernate.  Implemnt  securi¬ 
ty  using  Obfuscation  (DashO)  & 
Code  signing  using  VeriSign 
Digital  Signature.  Resumes: 
Taylor  Assoc  Comm,  Inc.,  200-2 
E  2nd  St,  Huntington  Station,  NY 
11746.  Job  Soc.:  Huntington  Stn, 
NY. 


Personnel  Manager  (Technical)/ 
Recruiters  sought  to  recruit, 
interview,  select  information 
technology  professionals  to  fill 
vacant  positions.  Master's  de¬ 
gree  or  foreign  or  functional 
equivalent  in  Computer  Science, 
Engineering  or  Business  related 
field  and  minimum  1  yr.  experi¬ 
ence  in  job  offered  or  technical 
consulting  field.  Excellent  bene¬ 
fits  and  salary  commensurate 
with  experience.  Positions  avail¬ 
able  nationwide.  Send  resume 
to:  Recruitment  Coordinator, 
Ref.  Code  ORco,  4400  Camp¬ 
bells  Run  Road,  Pgh.,  PA 
15205;  EEO/AAP/M/F/V/H . 


Sr.  Software  Engineer  needed  w/ 
Masters  or  foreign  equiv  in  Comp 
Info  Systms  or  Comp  Sci  or  Engg 
&  1  yr  exp  to  research,  dsgn, 
dvlp,  analyze  &  test  comp  S/W 
systms,  client  server  &  object  ori¬ 
ented  applies  using  Java,  JSP, 
Servlets,  Oracle,  MS  Access, 
Apache  Tomcat,  Cyrstai  Reports 
&  UML  on  Windows  &  Unix  (Red- 
Hat  Linux)  operating  systms. 
Formulate  &  dsgn  S/W  systm 
using  scientific  analysis  &  mathe¬ 
matical  models  to  predict  &  mea¬ 
sure  outcome  &  consequences 
of  dsgn.  1  yr  exp  as  S/ware  Engr 
is  acceptable.  Mail  resumes  to: 
KGF  Associates,  inc.,  777  Wash¬ 
ington  Rd,  Ste  1,  Parlin,  NJ 
08859.  Job  Loc:  Parlin,  NJ  or  any 
unanticipated  Iocs  in  USA. 


Software  Engineer: 

Software  Quality  Leaders, 
Inc.  plan,  design,  devel¬ 
op,  test,  and  document 
software.  Resume  to: 
Attn.  HR.  3150  De  La 
Cruz  Blvd.,  #138,  Santa 
Clara,  CA  95054  or  email 
openjobs@softql.com 

Computerworld  - 


Software  Engineer  utiliz¬ 
ing  object  oriented 
methodologies  &  C# 
consistent  with  CMM 
(Capability  Maturity 
Model).  Mail  to  Sierra 
Metrics  inc.  2820  10th 
Street,  Sacramento,  CA 
95818  or  fax  to  (866) 
585  4628 _ 
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Florida  Opportunities 

Datatel 

Required  Skills 

Systems  Administrator 
Systems  Engineer 

•  Datatel  Colleague 

•  Unidata/Uniquery 

•  Envision 

Positions  available  at 

•  Unix/Linux 

Hillsborough  Community 

•  Bachelor’s  Degree 

College  —Tampa,  Florida 

4  to  5  Years  Experience 

Email  Resumes:  (Word  format) 

Roger  Stannard 
Employment  Manager 
rstannard@hccfl.edu 

Hillsborough 

http://  www.  hccfl.ed  u 

Ccxnmuniiy  Colleges! 

Computer/Banking  Information 
Systems  Managers  Needed 
Capital  Consultancy  Services, 
Inc. (CCS),  an  established  finan¬ 
cial  and  banking  consulting  firm, 
is  in  need  of  Computer/  Banking 
Information  Systems  Managers 
to  oversee  implementation,  cus¬ 
tomization  and  support  of  finan¬ 
cial  and  banking  computer  infor¬ 
mation  systems.  Ideal  candi¬ 
dates  will  have  a  Master's 
degree  in  computer  science  or 
engineering  and  experience  with 
banking  application  software 
such  as  PROFILE  and  MUMPS. 
We  will  consider  applicants  with 
a  Bachelor's  degree  and  signifi¬ 
cant  industry  experience.  Posi¬ 
tions  based  in  Wayne,  PA  and 
may  require  temporary  reloca¬ 
tion  to  various  client  sites 
throughout  the  United  States 
and  countries  abroad.  Qualified 
candidates  should  mail  resumes 
to:  HR  Department,  CCS,  435 
Devon  Park  Drive,  Building  500, 
Wayne,  PA  19087. 


Senior  Analyst/Developer  -1 
Goldman,  Sachs  &  Co.,  New 
York,  NY.  Provide  solutions  to 
business  problems  &  translate 
functional  requirements  into 
technical  specifications  &  de¬ 
sign.  Required:  Masters  in  Com¬ 
puter  Science,  Computer  Engin¬ 
eering  or  related  field  plus  3  yrs 
exp  in  offered  position  or  as  a 
Systems  Analyst,  or  Bachelor's 
degree  in  Computer  Science, 
Computer  Engineering  or  relat¬ 
ed  field  plus  5  yrs  exp  in  offered 
position  or  as  systems  analyst. 
Prior  exp  must  incl  utilizing  Java, 
PERL  &  ORACLE  &  Sybase 
relational  databases  &  project 
management  skills  through  the 
complete  project  life  cycle.  Job 
Code:  TECH082505SAD.  Apply 
online:  httDs://aoldmansachs. 
recruitmax.com/ena/candidates/ 

using  "Build  Your  Profile"  option. 
Candidates  must  provide  job 
code  in  "Specific  Type"  field.  NO 
PHONE  CALLS  PLEASE. 


Engineering  Analyst/Program¬ 
mer  (Melville,  NY).  Design  & 
dev  automated  engg  app,  maint 
&  operat'n  of  computerized 
scheduling  sys.,  dev  on-line  app 
prog’s  update,  generate/ana¬ 
lyze  reports  through  diff  visual 
formats,  using  MS  Project  serv¬ 
er,  MS  Project,  Primavera,  SQL, 
Visual  Basic,  Open  Plan, 
Maximo,  Crystal  Report,  dBase 
&  AutoCAD.  BS  or  equiv  in  any 
Engg,  Comp  Sci,  or  related,  +  5 
yrs  re!  exp.  Resume  to:  Lehigh 
Power  Engineering,  1121  Old 
Walt  Whitman  Rd.,  Ste  202, 
Melville,  NY  11747. 


IT  Professionals 

cyberThink  Inc.  is  a  NJ  based  IT 
consulting  comp,  with  clients  all 
over  USA.  We  have  multiple  op¬ 
enings  for  IT  Professionals  (Pro¬ 
grammers/Software  Eng/Sys. 
Analysts/Admins/Net.  Eng/DBA) 
with  Bach  +  2  yrs  exp  in: 
ERP/CRM:  Oracle  Appln,  Peo- 
plesoft,  SAP,  JD  Edwards  & 
Siebel  (Job#GA1) 

Bl:  Hyperion,  Informatica,  BO, 
Cognos,  Brio,  Microstrategy. 
(Job  #GA2) 

Bus.  Appln/Prog:  Oracle,  SAS, 
VB/ASP.NET,  Crystal  Repts, 
J2 EE/JAVA,  ODBC,  Pro*C,  C / 
C++,  VC++,  C#,  PL/SQL,  Repts/ 
Forms,  RDBMS,  Web  Methds/ 
Sphere.  (Job#GA3) 
Admin/Network:  Unix,  Solaris, 
HP,  AIX,  Linux,  Win  NT/2000, 
Cisco,  VoIP,  LAN/WAN/SAN, 
SNMP,  Novell.  (Job#GA4) 

DBA:  Sybase/SQL/Essbase/ 

DB2/Oracle  (Job#GA5) 

Frequent  travel  to  client  sites  re¬ 
quired  for  above  positions. 

We  also  have  positions  open  for 
Mkt  Research/Bus.  Analyst/ 
Tech.  Recruiter  at  our  NJ  loca¬ 
tion.  (Job#GA6) 

Mast  or  equiv  +  1  yr  exp  reqd  for 
senior  positions. 

Send  resume  to  cyberThink  Inc., 
1125  US  Highway  22  West,  Brid¬ 
gewater,  NJ  08807,  Attn:  (job  #). 
Specify  the  skills  in  which  you 
are  seeking  job.  EOE. 


Network  Developer:  Design,  test 
&  install  web  based  applications 
&  e-commerce  systems,  online 
focus  groups,  real-time  distribution 
&  inventory  management/report¬ 
ing  tool  for  retail  stores. 
Implement  &  manage  the  OSI 
Layers  of  PC  &  Macintosh  based 
networks.  Develop  administrative 
interfaces  for  websites  to  enable 
the  website  to  be  dynamically 
generated.  Maintain  account  pay¬ 
roll  &  inventory  system  utilizing 
"Peachtree  S/w".  Upgrade  office 
network  during  "downtime"  on 
weekends.  Comp  Sal  2  yrs  exp 
BA  in  Com  Sci,  Cisco  &  MCSE 
req'd  40.hrs.  wk  Mon-Fri.  Send 
res  to  7-ELEVEN,  c/o  Mr.  J. 
Sheikh,  710  Horseblock  Rd, 
Farmingville,  NY  11738 


Programmer  Analyst  needed  w/ 
Bach  or  foreign  equiv  in  Comp 
Sci  or  Comp  Engg  or  Math  &  2 
yrs  exp  to  analyze,  dsgn,  dvlp 
test  &  debug  s/ware  applies  & 
reports  using  Multi-tier  client 
server  technology  of  Passport, 
C,  Korn  Shell,  SQL,  Dynamic- 
SQL,  Dbaccess,  Passport  Team 
tool,  Passport  Report  Writer  & 
Crisp  Editor  using  Informix  as 
d/base  on  Unix  &  Windows  op¬ 
erating  systms.  Mail  resumes  to 
Empower  Technology  Solutions 
Inc.,  196  Princeton  Hightstown 
Rd,  Bldg.  #2,  Ste  14,  West 
Windsor,  NJ  08550.  Pis  mention 
Job  ref  #5051.  Job  loc:  West 
Windsor,  NJ  or  in  any  unantici¬ 
pated  Iocs  in  the  USA. 
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SQL  Server 

databases  of  market  leaders 
Oracle  Corp.  and  IBM  within  a 
year.  Long  &  Foster  plans  to 
begin  using  a  production  ver¬ 
sion  of  the  database  in  the 
spring,  when  the  real  estate 
company  is  due  to  launch  a 
new  version  of  its  corporate 
Web  site. 

SQL  Server  2005  supports 
database  encryption  and  other 
new  security  features,  as  well 
as  full-text  search, 
native  storage  and 
querying  of  XML 
documents,  and 
added  business  in¬ 
telligence  function¬ 
ality  (see  story  at 
right).  The  database 
is  also  integrated 
with  Visual  Studio 
2005,  which  lets  de¬ 
velopers  write  appli¬ 
cations  in  C#  or 
Visual  Basic  instead 
of  doing  SQL  pro¬ 
gramming. 

Mediterranean 
Shipping  Co.,  a 


w . 


CATASSI  says 
end  users  saw  a 
“dramatic  reduc¬ 
tion”  in  the  time 
needed  to  run 
queries  after 
Mediterranean 
Shipping  upgraded 
SQL  Server. 


looking  for.  Some  promised 
capabilities,  most  prominently 
database  mirroring  for  auto¬ 
matic  backups  of  information, 
aren’t  due  to  be  available  until 
next  year.  Meanwhile,  his  per¬ 
sonal  wish  list  still  includes 
features  such  as  the  ability  to 
load  and  compare  multiple 
performance  monitoring  logs 
from  different  systems. 

Benefit  to  Developers 

Craig  Steele,  a  senior  network 
engineer  at  Progent  Corp.,  an 
IT  consulting  firm  in  San  Jose, 
said  the  most  tangi¬ 
ble  improvements  in 
SQL  Server  2005 
likely  will  benefit 
developers  more 
than  database  ad¬ 
ministrators.  For  ex¬ 
ample,  he  pointed  to 
the  integration  of  the 
database  with  Visual 
Studio  2005,  which  is 
also  being  launched 
this  week. 

“Developers  will 
be  happy  with  the 
new  SQL  Server,  but 
if  you’re  an  IT  pro¬ 
fessional,  whoop- 
dee-doo-dah-day,”  said  Steele, 
who  consults  with  corporate 
users  on  projects  involving 
SQL  Server  and  Microsoft’s 
Exchange  Server. 

Steele  added  that  he  doesn’t 
view  the  new  release  as  a  huge 
shift  in  technology  from  its 
SQL  Server  2000  predecessor. 
“I  know  pure  SQL  [Server] 
people  will  love  it,”  he  said. 
“I’m  just  not  sure  about  the 
rest  of  the  world.” 

Raichura  said  the  support 
for  Microsoft’s  Common  Lan¬ 
guage  Runtime  technology  via 
Visual  Studio  will  let  him 
avoid  having  to  go  to  multiple 
developers  with  different  spe¬ 
cialties.  “I  can  natively  write 
stored  procedures  straight 
into  software,”  he  said.  “This 
increases  my  resource  pool 
because  it  reduces  the  distinc¬ 
tion  between  software  devel¬ 
opers  and  architects.” 

Kirk  Pothos,  a  software  de¬ 
velopment  manager  in  Xerox 


Corp.’s  printer  service  divi¬ 
sion,  called  Visual  Studio  2005 
“a  huge  step  forward”  for  Mi¬ 
crosoft.  He  added  that  his 
team  has  already  upgraded  to 
the  new  versions  of  both  SQL 
Server  and  Visual  Studio. 

Robert  Hurlbut,  an  indepen¬ 
dent  software  consultant  in 
Worcester,  Mass.,  said  SQL 
Server  2005’s  security  features 
are  a  big  improvement  over 
what  was  in  the  previous  re¬ 
lease  of  the  database,  especial¬ 
ly  for  government  users  and 
companies  in  the  health  care 
and  financial  services  indus¬ 
tries.  Microsoft  has  “locked 
down  the  ports  and  turned 
things  on  automatically  that 
you  used  to  have  to  do  by 
hand,”  Hurlbut  said. 

DesignMind  Inc.,  a  software 


OTHER  PRODUCTS 

In  addition  to  SQL  Server 
2005,  Microsoft  this  week 
is  announcing: 

BizTalk  Server  2006 

Supports  business  activity 
monitoring  procedures. 

Enables  users  to  aggregate  multi¬ 
ple  business  processes  into  a  single 
application. 

Visual  Studio  2005 

Includes  Visual  Studio  Team  System 
for  collaborative  development. 

Adds  integrated  life-cycle  man¬ 
agement  tools. 

Provides  users  with  access  to  the 
.Net  Framework. 

Lets  IT  architects  and  designers 
create  service-oriented  applications. 

development  firm  in  Oakland, 
Calif.,  has  been  using  “a  nar¬ 
row  set”  of  SQL  Server  2005’s 
features  in  live  applications 
for  several  months,  said  Mark 
Ginnebaugh,  the  firm’s  presi¬ 
dent  and  head  of  the  San  Fran¬ 
cisco  SQL  Server  User  Group. 

Now  DesignMind  is  moving 

forward  on  more  extensive 
projects,  such  as  using  SQL 
Server  2005  to  set  up  a  large 
data  mart  for  one  client,  Gin¬ 
nebaugh  said.  Doing  that  on 
top  of  the  client’s  existing  DB2 
database  “would  have  been  far 
more  costly  and  difficult,”  he 
added.  ©  58005 

Users  Look  to  Database  for  Business  Intelligence  Apps 


MICROSOFT  USERS  last  week 
said  they’re  pinning  their  hopes 
for  future  business  intelligence 
projects  on  new  SQL  Server 
2005  features  designed  to  boost 
performance  and  ease  end 
users’  reliance  on  IT  staffers. 

The  new  version  of  the  data¬ 
base  adds  enhanced  features  for 
building  and  managing  data  inte¬ 
gration  processes,  analyzing  Bl 
data  and  building  reports,  Micro¬ 
soft  said. 

Mayur  Raichura,  managing  di¬ 
rector  of  information  services  at 
The  Long  &  Foster  Cos.  in  Fair¬ 
fax,  Va.,  said  he  hopes  the  new 
Analysis  Services  feature  in  SQL 
Server  2005  will  allow  him  to 
analyze  data  about  customers 
who  use  the  real  estate  compa¬ 
ny’s  Web  site  and  then  proac¬ 
tively  provide  them  with  data 
tailored  to  their  needs. 

The  analysis  features  in  the 
previous  SQL  Server  2000  ver¬ 
sion  didn’t  scale  well  enough  to 
handle  such  tasks,  he  added. 

The  new  analysis  tools  in  SQL 
Server  2005  are  designed  to  in¬ 
tegrate  online  analytical  process¬ 
ing  and  relational  reporting  to 
help  users  spot  correlations  and 


Geneva-based  company  that 
operates  container  ships,  is  al¬ 
ready  running  the  new  data¬ 
base  on  production  systems. 

As  part  of  Microsoft’s  Tech¬ 
nology  Adoption  Program 
[QuickLink  57875],  Mediter¬ 
ranean  Shipping  beta-tested 
SQL  Server  2005  for  nearly  a 
year  before  going  live  with  the 
Enterprise  edition  several 
months  ago. 

Fabio  Catassi,  the  shipping 
company’s  chief  technical  of¬ 
ficer,  said  end  users  experi¬ 
enced  a  “dramatic  reduction” 
in  the  time  needed  to  run 
queries  after  Mediterranean 
Shipping  upgraded  to  a  64-bit 
version  of  SQL  Server  2005 
running  on  a  Unisys  ES7000 
server.  The  performance  gains 
were  also  a  result  of  high- 
availability  features  such  as 
the  database’s  online  index¬ 
rebuilding  capability,  he  said. 

SQL  Server  2005  doesn’t 

have  everything  Catassi  is  _ 
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patterns  in  data  mining  applica¬ 
tions,  according  to  Microsoft. 

Barnes  &  Noble  Inc.  has  been 
migrating  its  data  warehouse 
from  SQL  Server  2000  to  the 
new  release  since  June,  said 
Chris  Troia,  CIO  at  the  New  York- 
based  retailer. 

The  data  warehouse,  which 
holds  about  4TB  of  sales  and  in¬ 
ventory  data,  will  grow  to  14TB 
within  a  year,  he  added. 

One  of  the  biggest  advan¬ 
tages  of  SQL  Server  2005,  Troia 
said,  is  better-performing  ex¬ 
tract,  transform  and  load  tools. 

The  tools,  which  are  part  of 
the  new  version’s  Integration 
Services,  offer  improved  perfor¬ 
mance  and  management  capa¬ 
bilities,  Microsoft  said,  adding 
that  users  shouldn’t  have  to  buy 
enterprise-class  data  integration 
tools. 

Eliot  Gardener,  a  project  man¬ 
ager  at  Barnes  &  Noble,  noted 
that  SQL  Server  2005  requires 
developers  to  write  fewer  scripts 
and  less  code  to  access  data. 

In  January,  Barnes  &  Noble 
plans  to  begin  using  the  produc¬ 
tion  release  of  Report  Builder,  a 
new  tool  in  the  database  de¬ 


signed  to  allow  nondevelopers 
to  create  and  publish  Bl  reports. 

Now,  developers  must  do  a  lot 
of  hand  coding  to  develop  front- 
end  presentations  for  reports, 
according  to  Troia.  Using  the 
beta  of  the  Report  Builder  soft¬ 
ware,  developers  are  writing  the 
presentation  in  about  a  half- 
hour,  slashing  a  day  or  two  from 
the  previous  report-development 
process,  he  said. 

Chris  Alliegro,  lead  analyst 
at  independent  research  firm 
Directions  on  Microsoft  in  Kirk¬ 
land,  Wash.,  said  the  Bl  capabili¬ 
ties  in  the  database  give  Micro¬ 
soft  access  to  new  markets. 

"Their  Bl  platform  gives  them 
an  opportunity  to  get  their  foot  in 
the  door  even  at  companies  who 
aren’t  using  SQL  Server  as  their 
database  management  plat¬ 
form,”  he  said,  noting  that  the  Bl 
technology  can  work  with  non- 
Microsoft  data  sources. 

Microsoft  “may  not  displace 
Oracle  or  IBM  as  the  core  enter¬ 
prise  database  engine,”  Alliegro 
said,  “but  they  can  sell  licenses 
for  analysis  of  data  and  data  in¬ 
tegration.” 

-  Heather  Havenstein 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Out  of  the  Loop 


YOU’VE  SEEN  THEM  BEFORE  —  news  stories  or  ads 
pushing  yet  another  code  generator  that  “anyone  can 
use  to  create  real  applications.”  Infuriating,  aren’t  they? 
The  basic  pitch  is  always  the  same:  Business  users  can 
build  their  own  applications,  cutting  the  IT  department 
out  of  the  process  and  thus  saving  time,  money  and  misery. 

Yeah,  it’s  insulting.  It  strokes  users’  egos  and  plays  on  prejudices 
against  those  uncooperative,  obstructionist  control  freaks  in  IT  with 
their  requirements  processes  and  long  pipelines  and  technospeak 
about  why  they  didn’t  deliver  what  users  wanted. 

But  don’t  get  mad.  After  all,  what  exactly  do  you  stand  to  lose? 


Think  about  it:  You’ve  always  had  users  who 
built  their  own  applications,  at  least  as  long  as 
there  have  been  desktop  computers.  Users 
wrote  them  in  Basic,  as  batch  files,  with 
macros,  with  personal  database  programs.  Most 
of  all,  they  wrote  them  in  the  most  powerful 
user-oriented  development  environment  ever 
created:  the  electronic  spreadsheet. 

Those  user-built  applications  became  useful. 
Other  users  got  copies.  Pretty  soon,  the  inge¬ 
nious  spreadsheet  hack  that  worked  so  well  for 
a  power  user  and  a  few  friends  spread  through 
a  whole  department  and  beyond  —  and  hit  a 
wall.  The  network  bogged  down,  or  the  data¬ 
base  server  groaned  under  the  load,  or  the  data 
users  wanted  wasn’t  easy  to  import. 

And  that’s  when  IT  was  brought  in  to  make 
this  user-built  monstrosity  more  scalable  and 
interoperable  —  in  other  words,  to  turn  it  into 
a  real  application. 

See?  There’s  nothing  new  to  the  idea  of 
cutting  IT  out  of  the  software  development 
process.  Users  have  always  cut  you  out  of  the 
loop  —  until  there’s  a  problem.  Then  they  want 
you  to  make  it  work. 

And  in  the  midst  of  trying  to  pick 
through  spaghetti  code  or  badly 
formed  macros  or  impenetrable 
spreadsheet  formulas,  it’s  easy  to 
lose  sight  of  what  users  have  actual¬ 
ly  done:  relieved  you  of  some  of  the 
hardest  parts  of  app  development. 

When  users  build  their  own 
working  software,  you  don’t  have  to 
pry  out  of  them  what  it  is  they  want. 

You  don’t  have  to  wonder  whether 
they’ll  find  an  application  useful. 

You  don’t  have  to  guess  about  the 
business  process  or  tinker  with  look 


and  feel  or  experiment  with  prototypes. 

You’ve  got  the  prototype.  It  may  be  the  messi¬ 
est  sketch  of  an  application  you’ve  ever  seen, 
but  it  is  what  users  are  asking  for.  That  you  can 
be  sure  of. 

So  the  heavy  lifting  of  requirements  collec¬ 
tion,  prototyping,  user  acceptance  —  that’s  al¬ 
ready  been  done  for  you.  All  you  have  to  do  is 
produce  a  cleaner,  more  scalable  and  interoper¬ 
able  clone  of  what  users  have  already  defined, 
accepted  and  enhanced.  That’s  the  sort  of  thing 
you’re  good  at,  right? 

Wait,  it  gets  better.  You  may  not  even  have  to 
do  that.  Sometimes  you  can  clear  bottlenecks  in 
these  user  hacks  with  a  few  stored  database 
procedures  or  precalculated  values.  A  little 
back-end  work,  and  suddenly  the  database  and 
network  load  drops.  Sure,  the  user-built  appli¬ 
cation  is  as  ugly  as  ever.  But  now  it’s  ugly  and 
scalable  —  and  done  almost  overnight,  instead 
of  at  the  end  of  a  long  development  project. 

In  other  words,  with  user-built  apps,  you 
have  more  options,  a  better  understanding  of 
the  need,  guaranteed  user  involvement  and 

management  support,  a  high  likeli¬ 
hood  that  you’ll  deliver  a  winning 
application  —  and  plenty  of  credit 
for  IT  and  users  to  share  when  the 
project  is  a  success. 

So  don’t  get  mad  at  software 
marketing  bozos  who  goad  users 
to  cut  IT  out  of  the  loop.  Let  users 
build  their  little  apps.  They’ll  cut 
you  out  of  the  loop,  all  right  —  just 
long  enough  to  take  the  riskiest 
and  most  miserable  slice  of  the 
job  off  your  hands. 

Think  you  can  bear  to  lose  that? 

©  57968 


frank  hayes,  Computer- 
world’s  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworld.com. 


What  Were  They  Thinking? 

CFO  stops  by  IT  to  ask  why  the  new  e*commerce  Web 
site  is  taking  so  long.  Pilot  fish  explains  that  project 
team  members  just  started  on  it  a  month  before,  using 
a  new  language  per  the  CFO’s  specs  -  on  top  of  which 
they’ve  been  dealing  with  changes  that  had  to  be 
worked  into  the  original  design.  CFO’s  response:  1 
wish  there  was  a  way  we  could  just  give  the  computer 
a  set  of  rules  instead  of  writing  all  this  code.”  Grum¬ 
bles  fish,  “After  that,  we  just  yessed  him  until  he  left,” 
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new-hire  techie  f  An!lW  document 
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something  goes  wrong  j 
during  the  upgrade.  I 

“He  knew  how  to  fix 'it-  j 
remove  the  processor,”  ; 
reports  a  pilot  fish  on  the  j 
scene.  “Unfortunately, 


Going  Down 

“One  of  cur  engineers 
came  in  early  today  to 
load  some  software,” 
reports  an  IT  pilot  fish. 
‘As  he  stepped  from  the 


the  processor  was  :D 


attached  to  the  mother- 
hoard.  But  that  didn't 
deter  this  techie  -  after 
a  few  minutes  of  apply¬ 
ing  pliers  and  brute 
force,  he  got  it  out. 
Luckily,  that  PG  is  the 
perfect  weight  to  prop 
open  the  door  to  our  test 
iab  when  we're  working 
in  there.” 

Efficiency 


j  from  under  his  arm  and 
j  disappeared  down 
I  through  the  crack  be- 
j  tween  the  elevator  and 
!  the  floor.  The  joke  of  the 
j  day  is  that  he’s  trying  to 
program  the  elevator 
but  can’t  even  find  the 
i  button  to  eject  the  CD 
j  from  it.” 


Not  in  the  Plans 

IT  pilot  fish  is  responsi- 
Tliis  pilot  fish  really  likes  j  hie  for  a  million-dollar 


his  company’s  online 
change  management 
system  -  or  did,  any¬ 
way.  “We  e-mailed  the 
change  request  to  ap¬ 
provers,  who  rejected  or 
accepted  the  change  and 
put  it  into  production,” 
says  fish.  “It  was  paper¬ 
less  and  efficient.  Now 
a  new  process  comes 
down  from  management: 
Print  online  form.  Walk 
around  and  obtain  physi¬ 
cal  signatures  (ap¬ 
provers  may  be  in  a  dif¬ 
ferent  building).  Once 
request  is  approved, 
scan  document,  save  as 


fault-tolerant  server. 
‘The  system  truly  runs 
unattended,  sometimes 
for  months,”  says  fish. 
“One  day  I  walked  into 
the  computer  room  and 
found  that  building  ser¬ 
vices  had  installed  a 
sprinkler  system,  since 
‘the  blueprints  show 
one.’  Building  manager 
was  adamant  until  I  told 
him  he  could  be  respon¬ 
sible  for  washing  down 
a  million  dollars’  worth 
of  computer  equipment 
due  to  a  false  alarm. 
The  pipes  were  gone 
the  following  week.” 
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